Information processing method and device, computer device and storage medium

Abstract

The application relates to an information processing method and device, computer equipment and a storage medium. The method comprises the following steps: obtaining a community message published by a target community, the target community being a community of a social platform matched with a preset first type keyword and pulled and joined by the social platform after a preset social account is used to log in to the corresponding social platform; determining a target community message matched with a preset second type keyword in the community message, and extracting key information in the target community message; determining business data associated with the key information, extracting associated business information in the associated business data; and determining processing information based on the key information and the associated business information. The method can timely discover the risk of online resource leakage, timely discover security risks, and improve security.

Description

[0001] The present application claims priority to the Chinese patent application No. 2021101538026, filed on February 4, 2021, and entitled "Information processing method and device, computer device and storage medium", the whole content of which is incorporated herein by reference. TECHNICAL FIELD

[0002] The present application relates to the technical field of computer, in particular to an information processing method and device, a computer device and a storage medium. BACKGROUND

[0003] With the development of computer technology, online promotion has become an important way for enterprises to promote business. When an enterprise promotes online business, it usually publishes some online resources on the line, such as red packets, gold coins, coupons, etc. When a user meets certain promotion conditions, the enterprise will give these resources to the user to achieve the purpose of promotion. However, in this promotion activity based on online resources, there are some logical loopholes in the business logic of online resource promotion that the publisher cannot find. After these logical loopholes are found, they will be exploited, so that users can steal these online resources originally used for promotion without meeting the promotion conditions, and make a profit by reselling them, causing great loss to the business assets and funds of the enterprise. SUMMARY

[0004] Therefore, it is necessary to provide an information processing method and device, a computer device and a storage medium to solve the above technical problems.

[0005] An information processing method, the method comprising:

[0006] Obtaining a community message published by a target community, the target community being a community of the social platform matched with a preset first keyword after logging in to the corresponding social platform using a preset social account and being pulled and joined;

[0007] Determining a target community message in the community message matched with a preset second keyword, and extracting key information in the target community message;

[0008] Determining business data associated with the key information, and extracting associated business information in the associated business data;

[0009] Determining processing information based on the key information and the associated business information.

[0010] In one embodiment, the preset social account includes two or more;

[0011] logging into the corresponding social platform by the robot module using the preset social account, including: logging into the corresponding social platform by the robot module using each of the preset social accounts in the preset social account table.

[0012] In one embodiment, the robot module pulls the target group account of the social platform matching the preset first type keyword, including:

[0013] The robot module pulls the target group account of the social platform matching the preset first type keyword every first predetermined time interval.

[0014] In one embodiment, after the robot module logs into the corresponding social platform using the preset social account, it further includes the steps of:

[0015] Keeping the preset social account in an online state on the social platform.

[0016] In one embodiment, the robot module pulls the target group account of the social platform matching the preset first type keyword, including:

[0017] The robot module pulls the target group account matching the preset first type keyword returned by the group search interface of the social platform.

[0018] In one embodiment, the robot module pulls the target group account matching the preset first type keyword returned by the group search interface of the social platform, including:

[0019] The robot module sends a group search instruction containing the preset first type keyword through the group search interface of the social platform, and obtains the target group account matching the preset first type keyword returned by the group search interface based on the group search instruction.

[0020] In one embodiment, the robot module pulls the target group account matching the preset first type keyword returned by the group search interface of the social platform, including:

[0021] Obtain the target group account containing the preset first type keyword in the group name or group introduction returned by the group search interface.

[0022] In one embodiment, the target group publishes a group message every second predetermined time interval.

[0023] In one embodiment, the target group publishes a group message every second predetermined time interval by calling the pull information interface or the message push interface of the social platform through the message pull interface.

[0024] In one embodiment, the processing information is determined based on the key information and the associated business information.

[0025] The key information and the associated business information are spliced to obtain the processing information.

[0026] An information processing device, the device comprising:

[0027] A message acquisition module is configured to acquire a community message published by a target community, the target community being a community of the social platform that matches a preset first type of keyword and that is pulled and joined by the social platform after a preset social account is used to log in to the corresponding social platform.

[0028] A key information extraction module is configured to determine a target community message in the community message that matches a preset second type of keyword, and extract key information in the target community message.

[0029] An associated business information extraction module is configured to determine business data associated with the key information, and extract associated business information in the associated business data.

[0030] A processing information determination module is configured to determine processing information based on the key information and the associated business information.

[0031] A computer device, comprising a memory and a processor, the memory storing a computer program, and the processor implementing the following steps when executing the computer program:

[0032] A message acquisition module is configured to acquire a community message published by a target community, the target community being a community of the social platform that matches a preset first type of keyword and that is pulled and joined by the social platform after a preset social account is used to log in to the corresponding social platform.

[0033] A key information extraction module is configured to determine a target community message in the community message that matches a preset second type of keyword, and extract key information in the target community message.

[0034] An associated business information extraction module is configured to determine business data associated with the key information, and extract associated business information in the associated business data.

[0035] A processing information determination module is configured to determine processing information based on the key information and the associated business information.

[0036] A computer readable storage medium, having a computer program stored thereon, the computer program being executed by a processor to implement the following steps:

[0037] A message acquisition module is configured to acquire a community message published by a target community, the target community being a community of the social platform that matches a preset first type of keyword and that is pulled and joined by the social platform after a preset social account is used to log in to the corresponding social platform.

[0038] Identify target community messages in the community messages that match preset second-type keywords, and extract key information from the target community messages;

[0039] Identify the business data associated with the key information, and extract the associated business information from the associated business data;

[0040] Processing information is determined based on the key information and the associated business information.

[0041] The aforementioned information processing method, apparatus, computer equipment, and storage medium log in to the social platform corresponding to the pre-set social account through a pre-set social account, join target communities on the social platform that match the pre-set first type of keywords, and obtain key information from the target community messages published by these target communities. Based on this, they extract related business information from the business data associated with the key information. On this basis, they determine processing information based on the key information and related business information. Since the stolen online resources originally used for promotion are usually communicated and traded in communities, by joining target communities that match the pre-set first type of keywords through a pre-set social account and obtaining target community messages that match the pre-set second type of keywords, it is possible to obtain relevant information about the stolen online resources, promptly detect the risk of online resource leakage, promptly identify security risks, and improve security. Attached Figure Description

[0042] Figure 1 This is an application environment diagram of an information processing method in one embodiment;

[0043] Figure 2 This is a flowchart illustrating an information processing method in one embodiment;

[0044] Figure 3 This is a schematic diagram illustrating the underlying architecture of an information processing method in a specific example.

[0045] Figure 4 This is a flowchart illustrating an information processing method in a specific example.

[0046] Figure 5 This is a schematic diagram illustrating an application scenario of an information processing method in a specific example.

[0047] Figure 6 This is a structural block diagram of an information processing device in one embodiment;

[0048] Figure 7 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation

[0049] In order to make the purposes, technical solutions and advantages of the present application clearer, further detailed description will be given below in combination with the drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and not to limit the present application.

[0050] The information processing method provided by the present application can be applied to an application environment as shown in Figure 1 The device 10 and the social platform server 20 can communicate with each other through a network, and the social platform server 20 provides social services for each user terminal 201, 202, etc. The device 10 can be a terminal or a server, and in the embodiments of the present application, the device 10 is taken as a server for example. The user terminal 201 and the user terminal 202 can communicate with each other through the social platform server 20, the device 10 logs in to the social platform corresponding to the preset social account through the preset social account, joins the target social group of the social platform matching the preset first type of keyword, and obtains the key information in the target social group message in the social group message published by the target social group, and extracts the associated business information in the business data associated with the key information based on the key information and the associated business information. The processing information is determined based on the key information and the associated business information, and the information is obtained in this way. Therefore, when the terminal 201 and the terminal 202 send online resources based on logical loopholes that do not meet the promotion conditions through the social group, the risk of online resource leakage can be discovered in time, the security risk can be discovered in time, and the security can be improved. The terminal can be, but is not limited to, various personal computers, notebook computers, smart phones, tablet computers and portable wearable devices, and the server can be implemented by an independent server or a server cluster composed of multiple servers, wherein the multiple servers can form a blockchain, and the server is a node on the blockchain.

[0051] In one embodiment, as shown in Figure 2 An information processing method is provided, and the device 10 in the method is taken as an example for illustration, which includes the following steps S201 to S204. Figure 1

[0052] Step S201: Obtain the social group message published by the target social group, and the target social group is the social group matching the preset first type of keyword of the social platform after logging in to the corresponding social platform through the preset social account.

[0053] ​The preset social account is an account determined in advance for logging into a social platform. Different types of social platforms can have different forms of the preset social account. For example, in some embodiments, the preset social account can be an email address registered on the social platform or a custom social account defined during registration. In some embodiments, the preset social account can be a social account assigned by the social platform during registration. In other embodiments, the preset social account can also have other forms, as long as the form of the preset social account meets the requirements of the corresponding social platform and can log into the corresponding social platform.

[0054] The preset first type of keyword is a keyword of a community name related to a black production exchange information channel. Black production refers to a black industry chain, which refers to an industry chain for making, spreading, and trading black industry information of online resources stolen by exploiting logical loopholes in business logic. In some embodiments of the present application, the preset first type of keyword can also be referred to as a preset black production keyword, which can be collected according to historical accumulated black production cases. For example, by regularly crawling and collecting the titles and contents of related posts in a black production forum, and statistically analyzing the titles and contents of the related posts, the keywords statistically analyzed are stored in a preset first type of keyword list or set as the preset first type of keyword. For example, high-frequency co-occurring words can be counted as preset first type of keywords. The preset first type of keywords in one example can include, for example, stock resource data, credit card data, and vegetable data.

[0055] In some embodiments, before obtaining the community information published by the target community, the method further includes the steps of:

[0056] logging into the social platform corresponding to the preset social account by the robot module using the preset social account;

[0057] pulling, by the robot module, a target community account of the social platform matching the preset first type of keyword, and joining a target community corresponding to the target community account using the preset social account.

[0058] The robot module is an independent software module implemented by a software program, which simulates the functions of a user logging into a social platform using a social account, joining a community of the social platform, and obtaining community information of the joined community.

[0059] In some embodiments, logging into the social platform corresponding to the preset social account by the robot module using the preset social account includes:

[0060] start the robot module, the robot module uses the preset social account through an automated script to generate a data packet for interactive communication between a terminal and a server interface of a social platform corresponding to the preset social account, and logs into the social platform based on the data packet.

[0061] After logging into the social platform corresponding to the preset social account through the robot module using the preset social account, the preset social account can also be kept in an online state on the social platform. In some embodiments, the robot module can send an online signal to the social platform at intervals of a certain interval length to maintain the online state of the preset social account used by the robot on the social platform. In the case where the robot logs into different social platforms using multiple preset social accounts, different interval lengths can be set for sending online signals to different social platforms. Taking two social platforms as an example, an online signal can be sent to one of the social platforms at intervals of a first length, and an online signal can be sent to the other social platform at intervals of a second length. The first length and the second length can be the same or different based on the differences between the two social platforms. In the case where multiple preset social accounts are used to log into the same social platform, the corresponding interval lengths for sending online signals to the multiple preset social accounts can be the same or different. Thus, by keeping the preset social account in an online state on the corresponding social platform, the information acquisition process based on the social platform can be continuously performed, and the integrity and continuity of the information acquisition process can be improved.

[0062] In some embodiments, the preset social account includes two or more. In this case, logging into the corresponding social platform through the robot module using the preset social account includes logging into the social platform corresponding to each of the preset social accounts using each of the preset social accounts through the robot module. Each of the preset social accounts can be saved in a preset social account table or a preset social account set, etc., which can save and record information of multiple preset social accounts. In this case, taking the preset social account table as an example, each of the preset social accounts in the preset social account table can be used to log into the social platform corresponding to each of the preset social accounts through the robot module. It should be understood that in other embodiments, each of the preset social accounts can also be saved in other ways, as long as the robot module can obtain these preset social accounts to log into the corresponding social platform.

[0063] In some embodiments, the social platforms corresponding to the preset social accounts can be different. For example, there are three preset social accounts in the preset social account table: a first social account, a second social account, and a third social account, and each preset social account corresponds to a different social platform. In this case, the robot module can log in to the first social platform corresponding to the first social account using the first social account, log in to the second social platform corresponding to the second social account using the second social account, and log in to the third social platform corresponding to the third social account using the third social account.

[0064] In some embodiments, there can also be more than two preset social accounts corresponding to the same social platform. For example, there are three preset social accounts in the preset social account table as described above, and the first social account and the second social account correspond to the first social platform, and the third social account corresponds to the second social platform. In this case, the robot module logs in to the first social platform using the first social account and the second social account, and logs in to the second social platform using the third social account. In the preset social account table, the social platform identifiers corresponding to the preset social accounts can also be included to identify the social platforms corresponding to the preset social accounts.

[0065] In some embodiments, the robot module pulls the target social group accounts matching the preset first type of keywords from the social platform, including: the robot module pulls the target social group accounts matching the preset first type of keywords from the social platform every first predetermined time interval.

[0066] The first predetermined time interval can be set according to actual needs, for example, in some embodiments, the first predetermined time interval can be set to 1 hour, and in other embodiments, it can also be set to other time intervals.

[0067] In some embodiments, the robot module pulls the target social group accounts matching the preset first type of keywords from the social platform, including:

[0068] The robot module pulls the target social group accounts matching the preset first type of keywords returned by the social group search interface of the social platform.

[0069] The social group search interface refers to an interface provided by the social platform to search and query social groups of the social platform. The robot module can pull the target social group accounts matching the preset first type of keywords through the social group search interface of the social platform.

[0070] Specifically, the robot module sends a community search instruction containing the preset first type of keyword through a community search interface of the social platform, and obtains the target community account matched with the preset first type of keyword returned by the community search interface based on the community search instruction. Specifically, the community search instruction sent through the community search interface is sent to the server of the social platform corresponding to the community search interface. After receiving the community search instruction, the server of the social platform searches for the target community account matched with the preset first type of keyword, and returns the target community account obtained by the search to the robot module through the community search interface.

[0071] In the method, the target community account matched with the preset first type of keyword returned by the community search interface based on the community search instruction can specifically include the target community account whose community name or community profile contains the preset first type of keyword returned by the community search interface. Thus, the target community account obtained by the search is the community account of a community whose community name or community profile contains the preset first type of keyword.

[0072] Taking the preset first type of keyword including the spinach data as an example, the robot module can send a community search instruction through the community search interface of the social platform. The community search instruction can include the keyword "spinach data". The social platform can search the community name and the community profile of each community with "spinach data" as the keyword. If the community name of a community contains the keyword "spinach data" or the community profile of the community contains the keyword "spinach data", the account of the community is taken as the target community account obtained by the search. In other embodiments, the social platform can also perform fuzzy search. For example, the social platform can search the community name and the community profile of each community with "spinach data" as the keyword. If the community name or the community profile of a community contains a part of the keyword "spinach data", for example, the community name or the community profile of a community contains "spinach" or "data" that are not connected together, the social platform can also take the account of the community as the target community account obtained by the search. The specific search method is related to the search mechanism of the social platform. The embodiments of the present application are not limited in this regard.

[0073] In some embodiments, the robot module can also pull the community name and the community profile of the community of the target community account matched with the preset first type of keyword returned by the community search interface of the social platform at the same time.

[0074] In some embodiments, joining the target community corresponding to the target community account using the preset social account includes:

[0075] The robot module calls a community joining interface of the social platform to join the target community corresponding to the target community account.

[0076] The community joining interface refers to an interface provided by the social platform to join a specific community of the social platform. The robot module can join the target community corresponding to the target community account through the community joining interface of the social platform.

[0077] Specifically, the robot module calls the community joining interface of the social platform to send a group joining application information to join the target community corresponding to the target community account. The group joining application information includes the target community account and application content. In one specific example, the application content corresponds to the classification identifier of the preset first type keyword matched with the target community account.

[0078] Specifically, for each preset first type keyword, the classification identifier of the preset first type keyword can be recorded or set. The classification identifier identifies the classification category of the preset first type keyword. For different classification categories, corresponding application content can be set to realize the joining of different types of communities by category. Each preset first type keyword can correspond to one classification identifier, or two or more preset first type keywords can correspond to the same classification identifier. Each classification identifier is respectively set with corresponding application content. For any classification identifier, one application content can be set, or two or more application contents can be set. When it is specifically needed to join the target community, one or more of these application contents can be used.

[0079] For example, taking the preset first type keywords including stock resource data, credit card material, and spinach data as an example, the classification identifier of the keyword "stock resource data" and the keyword "credit card material" can be set as the data transaction category, and the classification identifier of the keyword "spinach data" can be set as the gambling category. For the data transaction category, the application can be "buying main data". It can be understood that in other embodiments, the classification identifier can be set by other ways, and different application contents corresponding to each classification identifier can be set. In addition, in some embodiments, the application content corresponding to each classification identifier can be updated after a certain time interval or based on the operation of the user.

[0080] Specifically, after obtaining the target social group account matched with the preset first type keyword, a classification identifier corresponding to the preset first type keyword is obtained, and based on the classification identifier, application content corresponding to the classification identifier is obtained, and then a group joining interface of the social platform is called to send group application information, the group application information including at least one of the target social group account and the application content corresponding to the classification identifier, so as to join the target social group corresponding to the target social group account.

[0081] In some embodiments, after simulating joining the target social group through the preset social account, the social group messages published by the target social group can be obtained every second predetermined time interval. Specifically, the social group messages published by the target social group can be obtained every second predetermined time interval by calling the message pulling interface of the social platform through the message pulling interface or the message pushing interface.

[0082] The social group messages include group chat messages sent by the members of the target social group in the target social group and can be viewed by other members of the target social group, and also include state information of the members of the target social group in the target social group.

[0083] The message pulling interface is an interface for pulling the group messages of the target social group from the social platform, and the message pulling interface is an interface provided by the server of the social platform for the terminal to pull messages. In a specific technical application, the message pulling interface and the message pulling interface are respectively deployed to the terminal and the server of the social platform, and the message pulling interface and the message pulling interface cooperate with each other to pull the social group messages from the server of the social platform.

[0084] Specifically, the message pulling interface can be used to send a message pulling request to the server of the social platform where the target social group is located. In some embodiments, the message pulling request can include the preset social account. After receiving the message pulling request through the message pulling interface, the server of the social platform obtains all messages associated with the preset social account in the social platform, the messages including social group messages, and returns the messages to the message pulling interface, so as to return the messages to the robot module through the message pulling interface. In some embodiments, the message pulling request can include the target social group account and the preset social account. After receiving the message pulling request, the server of the social platform obtains the social group messages of the target social group account, specifically, the newly generated social group messages of the target social group account from the last time the preset social account pulls messages (i.e., receives the message pulling request including the preset social account and returns the social group messages to it) to the present, and returns the messages to the robot module through the message pulling interface.

[0085] The message pushing interface is an interface provided by the social platform to actively push real-time messages of the community to the terminal. Specifically, the social platform server can actively push the community messages to each community user of the target community at a timing or when a new community message of the target community is generated. The robot module can obtain the community message pushed by the social platform server through the message pushing interface, so as to obtain the community message published by the target community.

[0086] Step S202: determining a target community message matched with the preset second type of keyword in the community message, and extracting the key information in the target community message.

[0087] The pre-set second type of keywords are keywords related to information released through black market information exchange channels. In some embodiments of this application, the pre-set second type of keywords can also be called pre-set black market words. They can include the aforementioned pre-set first type of keywords, as well as pre-set sensitive words, quantifiers, etc. In specific implementation, the pre-set second type of keywords can be represented in the form of regular expressions. A regular expression is a sequence of characters that defines a search pattern and is used to represent the pattern of matching text. Each character in a regular expression (i.e., each character in the string describing its pattern) is either a metacharacter with special meaning or a regular character with literal meaning. Taking the pre-set second type of keywords represented by regular expressions as an example, some examples of pre-set second type of keywords can be: stock resource data\d+, credit card data\d+, (\d+(piece|batch|share))?spinach data(\d+)?, King of Glory.*?lottery.*?bypass restrictions, etc. Regular expressions describe a string matching pattern, which can be used to check if a string contains a certain substring, replace matched substrings, or extract substrings that meet certain conditions from a string. It is a logical formula for manipulating strings (including ordinary characters (e.g., letters from a to z) and special characters (called "metacharacters")), that is, using predefined specific characters and combinations of these specific characters to form a "rule string," which expresses a filtering logic for the string. Ordinary characters include numbers and uppercase and lowercase letters, while metacharacters are characters with special meanings, including the following 11 literal characters: []\^$.|? *+(). The ordinary character \d+ represents matching one or more digits. Metacharacters are used for special purposes. For example, "." matches any character except the newline metacharacters "\n" and "\r"; "*" matches any number of times the preceding subexpression; "?" matches zero or one of the characters that precede it. When this character follows any other qualifier (*, +, ?, {n}, {n,}, {n,m}), the matching mode is non-greedy, matching as few strings as possible, while the default greedy mode matches as many strings as possible; "|" performs a logical "OR" operation on two matching conditions; "()" defines the expression between (and) as a "group".

[0088] The target community message that matches the preset second-type keyword can be a community message that contains information that matches the preset second-type keyword. For example, if the preset second-type keyword is represented by a regular expression, it can be a community message that contains information that matches the regular expression of the preset second-type keyword.

[0089] The key information in the extracted target community message is information that meets the online resource strategy in the target community message and other information related to the online resource, such as a link address, a telephone number, an email address, an identification number, and the like.

[0090] In some embodiments, after extracting the key information in the target community message, the following steps can also be included:

[0091] Comparing the key information with historical extracted key information;

[0092] Discarding the key information when the key information is included in the historical extracted key information;

[0093] When the key information is not included in the historical extracted key information, entering the following step S203 of determining the business data associated with the key information.

[0094] The historical extracted key information refers to the key information historically extracted from each target community. By comparing the currently extracted key information with the historical extracted key information, if the key information is included in the historical extracted key information, it means that the black production transaction information corresponding to the currently extracted key information has been obtained, so that the key information can be discarded directly, avoiding repeated acquisition of the same black production transaction information and improving processing efficiency and processing performance.

[0095] Step S203: determining the business data associated with the key information and extracting the associated business information in the associated business data.

[0096] The business data refers to information related to business services, which can be information related to business services provided by an enterprise, and is the basis for the enterprise to determine whether there is a business resource and whether there is a risk of leakage. In some specific examples, it can be information related to business services provided and stored by an enterprise, such as a user information table that may, in some examples, contain user registration mobile phone numbers, email addresses, account numbers, and the like.

[0097] In one embodiment, determining the business data associated with the key information includes:

[0098] According to the type of the key information, comparing the key information with the type of business information in the business data, and if there is a comparison result of associated business information, determining that the business data is associated with the key information.

[0099] Thus, by comparing the key information with the same type of business information in the business data, it can be determined whether there is business data related to the key information. By comparing the same type of information, the accuracy of the correlation analysis of the business data can be further improved.

[0100] The extracted associated business information in the associated business data can be any information related to business services. Specifically, the associated business information can be related information that helps to determine business vulnerabilities and locate business content. For example, in one embodiment, the extracted associated business information can be related information such as business name, domain name, administrator, etc. in the business data. In other embodiments, the extracted associated business information can also be other information.

[0101] Step S204: determining processing information based on the key information and the associated business information.

[0102] When determining the processing information based on the key information and the associated business information, various possible ways can be used for determination. For example, the key information and the associated business information can be filled into a processing information template based on the determined processing information template to determine the processing information. For another example, the key information and the associated business information can be processed according to the type of the extracted key information to determine the processing information. In one specific example, the processing information can be obtained by splicing the key information and the associated business information.

[0103] After obtaining the processing information, the processing information can be sent to the mailbox account, mobile phone or WeChat terminal of the enterprise security and operation personnel or related personnel through email, SMS, WeChat push, etc. to facilitate the enterprise security and operation personnel or related personnel to know that there is a security problem in the business service, there is a risk of large-scale utilization for profit, and to facilitate the enterprise security and operation personnel or related personnel to check the hidden danger at any time and prevent the danger from happening.

[0104] The above information processing method of the present application can be specifically applied to the acquisition of business threat intelligence information to facilitate the timely discovery of business vulnerabilities and prevent the danger from happening. The following will be described in detail in combination with an example of a specific application scenario.

[0105] Currently, when an enterprise promotes online business, it usually publishes some online resources online and distributes these resources to users who meet the promotion conditions to achieve the purpose of promotion. However, the business logic of online resource promotion may have some logical loopholes that the publisher cannot find. Therefore, more and more organizations or individuals are taking advantage of the logical loopholes of the business to steal a large amount of online resources originally used for promotion by enterprises, such as red packets, gold coins, coupons, and other virtual assets, and make profits by reselling them through underground channels. The gang nature of the server is not uncommon, and eventually forms a complete industry chain of making, spreading, and trading underground black industry information, that is, a black industry chain. Through these malicious operations, various illegal income data are generated to obtain benefits, which causes great hidden dangers to the business assets and funds of enterprises, and such information is often spread only in the social groups of black industry gangs. Based on the scheme of the embodiments of the present application, the above business threat messages can be normalized.

[0106] When the embodiments of the present application scheme are used to normalize the business threat messages, a robot module implemented by a program is used to simulate the joining of multiple members in social groups as black industry information sources, and periodically collect the data published in these social groups to obtain data related to enterprise business and assets. When the information recognition strategy is hit, the hitting social group message and the hitting social group message are automatically recorded and extracted, the key information is analyzed and extracted as threat intelligence, and the enterprise administrator is real-time pushed and alarmed, which realizes timely and comprehensive acquisition of black industry related information, thereby helping enterprises to carry out targeted business security reinforcement and online defense strategy.

[0107] Specifically, before the embodiments of the present application method are implemented, a preset first type of keyword, a preset second type of keyword, and an enterprise related asset table can be configured, and a robot module can be set.

[0108] The preset first type of keyword is a keyword related to the name of the social group of the black production exchange information channel. Specifically, it can be a keyword related to the name of the general black production exchange information channel. It can be collected according to historical accumulated black production cases. For example, by regularly crawling and collecting the titles and contents of related posts in black production forums, and statistically analyzing the titles and contents of related posts, the keywords are statistically analyzed as the preset first type of keyword, and stored in the preset first type of keyword list or set. For example, high-frequency co-occurring words can be counted as preset first type of keywords. The preset first type of keywords in an example can include, for example, stock resource data, credit card data, and vegetable data. It can be understood that in other embodiments, and based on the actual technology and the development of the black production industry, the preset first type of keywords can also include other keywords or other changes.

[0109] Preset second-category keywords are keywords related to information released through black market information exchange channels. They can include the aforementioned preset first-category keywords, as well as preset sensitive words, quantifiers, etc. In practice, preset second-category keywords can be represented using regular expressions. Some examples of preset second-category keywords could be: stock resource data\d+, credit card data\d+, (\d+(pieces|batch|shares))?gambling data(\d+)?, King of Glory.*?lottery.*?bypassing restrictions, etc.

[0110] The Enterprise-Related Assets Table stores information about the enterprise's related assets. Specifically, it can be information about assets related to the enterprise configured by the user, such as root domains like ***.com and ***.com.cn, to retrieve intelligence information related to the enterprise.

[0111] The robot module simulates a real user, maintaining an online state to receive all messages. The robot module includes a preset account table, a black market community association module, a login status maintenance module, and a message receiving module. In some embodiments, the robot module may also include preset first-category keywords configured above. In other embodiments, the preset first-category keywords may be set externally to the robot module, which then uses these preset first-category keywords in actual use. The following examples illustrate this using the setting of preset first-category keywords within the robot module.

[0112] The robot module, through the black market community association module, associates black market community accounts (i.e., the target community accounts) in the social platform based on the pre-set black market keyword table (i.e., the pre-set first type of keywords mentioned above). Through the login status maintenance and message receiving module, it uses the interface for simulating login of the pre-set social accounts and the web interface (API) provided by the social platform to maintain the online status of the pre-set social accounts. It also retrieves community messages received by multiple pre-set social accounts by polling the relevant web interface.

[0113] refer to Figure 3 , Figure 4As shown, in an actual business scenario, after starting the robot module, the robot module communicates with the server of the social platform through the related API (Application Programming Interface) interface provided by the server of the social platform. For example, the robot module uses the preset social account through an automated script to simulate the generation of a data packet for interactive communication between a terminal and a social platform server interface corresponding to the preset social account, logs in to the social platform corresponding to the preset social account based on the data packet. In some embodiments, the automated script can also be autonomously written by the robot module. Specifically, the robot module uses the preset account table and starts running in a server environment to simulate a data packet for interactive communication between a client and a server interface. The script can achieve simulated login to a related social platform.

[0114] During the running of the robot module, the robot module periodically (e.g., every hour) pulls data returned by a community search interface of a logged-in social platform based on a preset black production keyword (a preset first type of keyword) to obtain a list of related black production community accounts (i.e., a list of target community accounts), and makes the preset social account join a related black production community (i.e., joins a community corresponding to each target community account in the list of target community accounts) through a community joining interface.

[0115] The pulled data returned by the community search interface can be a community account of a community corresponding to a community name or a group introduction content that matches the black production keyword, which is searched by the community search interface through searching the community name and the group introduction content of the community. Thus, a black production community name is associated. The searched community account can also be referred to as a black production community name in related embodiments. Each preset first type of keyword has a corresponding classification identifier. Each classification identifier is provided with different application content. When the preset social account is made to join a related black production community through the community joining interface, the application content corresponding to the classification identifier of the preset first type of keyword matched to the black production community is also carried, so as to increase the probability of being able to join the black production community. For example, when the classification type corresponding to the classification identifier is a data transaction type, the application content sent can be, for example, a buyer looking for first-hand data. In other embodiments, the application content can also be set differently.

[0116] After the robot module joins the black production community through the preset social account, the robot module periodically (e.g., every second) calls a pull information interface provided by a related social platform server through a message pulling interface in a polling manner to obtain a currently published community message. The community message can specifically include chat information and published status information.

[0117] Based on the obtained community message, a target community message (also referred to as a matched text in the related embodiments) matching a preset second keyword (also referred to as a black word in the related embodiments) is determined, so as to extract the matched text and key information in the matched text. In some embodiments, the key information can include an activity link, a telephone number, and an email address, for example.

[0118] The preset second keyword is "King Glory.*? draw.*? bypass restrictions", and the target community message matched according to the preset second keyword is "a certain company's new game online privilege draw activity can bypass restrictions to draw unlimited prizes". The extracted key information can be, for example, http: / / www.xxx.com / activity?mode=1.

[0119] The preset second keyword is a regular expression "a certain company.*? leak, xxx.com, mobile phone number, and email address matching to extract the three types of information". The target community message matched is "a certain company forum 5 million user information leak". Part of the extracted key information can include:

[0120] {“phone”:”18********1”,”email”:aaa@xxx.com}

[0121] {“phone”:”18********2”,”email”:bbb@xxx.com}

[0122] {“phone”:”18********3”,”email”:ccc@xxx.com}.

[0123] Then, the extracted key information is compared with historical extracted key information stored in a database to determine whether the extracted key information is repeated, that is, whether the historical extracted key information includes the extracted key information. If repeated, the extracted key information is discarded.

[0124] If not repeated, the extracted key information is compared with the same type of business information in business data. If there is associated business information as a comparison result, it is determined that the business data is associated with the key information. The associated business information as a comparison result can be that the associated business information includes the same type of key information or part of the fields in the key information. For example:

[0125] If the extracted key information includes the mailbox information aaa@xxx.com, when comparing with the business information in the business data, in addition to checking whether the mailbox information aaa@xxx.com is in the employee mailbox table of the enterprise in the business data, the domain name xxx.com in the mailbox information is also extracted, and the extracted domain name xxx.com is compared with the domain name asset information table of the enterprise in the business data to determine whether it is the domain name of the enterprise;

[0126] If the extracted key information includes the link address http: / / www.xxx.com / activity?mode=1, the root domain name xxx.com in the link address is extracted, and the extracted root domain name is compared with the domain name asset information table of the enterprise in the business data to determine whether it is the domain name of the enterprise;

[0127] If the extracted key information includes the mobile phone number information, the extracted mobile phone number is compared with the user mobile phone number library saved by the business data of the enterprise, to determine whether it is the information of the registered user of the business of the enterprise.

[0128] In other embodiments, for other types of extracted key information, other ways of associating and comparing with the business data can also be used to determine whether the key information is associated with the business data.

[0129] In the determination of the business data associated with the key information, the associated business information in the associated business data is extracted, which can specifically include the above-mentioned comparison result of the key information, and can also include the business name, domain name, administrator, etc. Information in the associated business data. The extracted associated business information can be stored in the database, and when stored, the associated business information can be stored in association with the corresponding key information.

[0130] Before storing the corresponding key information and associated business information in the database, they can be compared with the information already stored in the database. If the key information and associated business information have already been stored in the database, they will be discarded and do not need to be stored repeatedly.

[0131] Finally, the extracted key information and business association information stored in the database are spliced into processing information, which is a new report alarm, which can be sent to the mailbox account and mobile phone number of the enterprise security operation and maintenance personnel through email, short message service, etc. In other embodiments, it can also be notified to the enterprise security operation and maintenance personnel through other ways.

[0132] In the specific pushing of the processing information to the enterprise security operation and maintenance personnel, the specific style of the processing information can be set differently. In one application example, the style of the processing information of the business vulnerability exploitation propagation intelligence can be as follows:

[0133]

Information Original

[0134] A company's new game online privilege lottery activity can bypass the limit to extract unlimited prizes: http: / / www.xxx.com / activity?mode=1

[0135]

Key information

[0136] http: / / www.xxx.com / activity?mode=1

[0137]

Source

[0138] Telegram community, community ID: 123456

[0139] Based on the scheme of the embodiments of the application as described above, the enterprise can determine the risk of large-scale profit utilization of the exposed business, and timely investigate the hidden danger to prevent trouble. At the same time, the enterprise can set specific sensitive words of industry concern to customize its business security needs. Reference Figure 5 As shown in the business security scenario of the specific application example, in addition to internal audit, the business security of the enterprise also needs to determine the external undisclosed business risk of the key and core business, so as to respond and confirm whether it is affected at the first time when a serious security event occurs. The information processing method provided by the embodiments of the application can conveniently help the enterprise to determine and control the risk of external black production utilization.

[0140] It should be understood that, although each step in each flowchart involved in each of the above embodiments is displayed in sequence according to the arrow, these steps are not necessarily executed in sequence according to the arrow. Unless otherwise specified in this article, the execution of these steps has no strict order restriction, and these steps can be executed in other orders. Moreover, at least part of the steps in these flowcharts can include multiple steps or multiple stages, which are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily sequential, but can be alternately executed with other steps or steps or stages in other steps.

[0141] In one embodiment, as Figure 6 shown, an information processing device is provided, which can adopt a software module or a hardware module, or be a part of a computer device in combination, and the device specifically includes:

[0142] The message obtaining module 601 is configured to obtain a community message published by a target community, the target community being a community of the social platform that matches a preset first type of keyword and that is pulled and joined by the social platform after a preset social account is logged in to the corresponding social platform;

[0143] The key information extracting module 602 is configured to determine a target community message in the community message that matches a preset second type of keyword, and extract key information in the target community message;

[0144] The associated business information extracting module 603 is configured to determine business data associated with the key information, and extract associated business information in the associated business data;

[0145] The processing information determining module 604 is configured to determine processing information based on the key information and the associated business information.

[0146] In an embodiment, the device further comprises a robot module configured to log in to the corresponding social platform using the preset social account, pull a target community account of the social platform that matches a preset first type of keyword, and join a target community corresponding to the target community account using the preset social account.

[0147] In an embodiment, the preset social account comprises two or more;

[0148] The robot module logs in to the social platform corresponding to each of the preset social accounts in the preset social account table using each of the preset social accounts.

[0149] In an embodiment, the robot module pulls the target community account of the social platform that matches the preset first type of keyword at a first predetermined time interval.

[0150] In an embodiment, after the robot module logs in to the corresponding social platform using the preset social account, the robot module keeps the preset social account in an online state on the social platform.

[0151] In an embodiment, the robot module uses the preset social account to generate a data packet for interactive communication between a terminal and a server interface of the social platform corresponding to the preset social account through an automatic script, and logs in to the social platform based on the data packet.

[0152] In an embodiment, the robot module pulls the target community account of the social platform that matches the preset first type of keyword returned by a community search interface of the social platform.

[0153] In one embodiment, the robot module sends a community search instruction containing the preset first type of keyword through a community search interface of the social platform, and obtains the target community account matched with the preset first type of keyword returned by the community search interface based on the community search instruction.

[0154] In one embodiment, the robot module obtains the target community account containing the preset first type of keyword in the community name or community profile returned by the community search interface.

[0155] In one embodiment, the robot module calls a community joining interface of the social platform to join the target community corresponding to the target community account.

[0156] In one embodiment, the robot module calls a community joining interface of the social platform to send a group joining application information to join the target community corresponding to the target community account, wherein the group joining application information includes the target community account and an application content corresponding to the classification identifier of the preset first type of keyword matched with the target community account.

[0157] In one embodiment, the robot module obtains the community message published by the target community after the target community is joined by the preset social account every second predetermined time interval.

[0158] In one embodiment, the robot module obtains the community message published by the target community every second predetermined time interval through a message pulling interface calling a pulling information interface or a message pushing interface of the social platform.

[0159] In one embodiment, the key information extraction module 602 further compares the key information with historical extracted key information, and discards the key information when the key information is included in the historical extracted key information.

[0160] In one embodiment, the associated business information extraction module 603 compares the key information with the type of business information in the business data according to the type of the key information, and determines that the business data is associated with the key information if there is associated business information as the comparison result.

[0161] In one embodiment, the processing information determination module 604 splices the key information and the associated business information to obtain the processing information.

[0162] The specific limitations of the information processing device can refer to the limitations of the information processing method described above, and will not be repeated here. Each module in the above information processing device can be implemented by software, hardware and their combination. The above modules can be embedded in or independent of the processor in the computer device in hardware form, or stored in the memory of the computer device in software form, so that the processor calls and executes the operations corresponding to each module.

[0163] In one embodiment, a computer device, which can be a server, is provided, and an internal structure diagram of the computer device can be as shown in Figure 7 The computer device includes a processor, a memory and a network interface connected by a system bus. The processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operating system and the computer program in the non-volatile storage medium to run. The database of the computer device is configured to store extracted key information, corresponding key information and associated business information, a preset social account table, a preset first type keyword, a preset second type keyword and the like. The network interface of the computer device is configured to communicate with an external terminal through a network connection. The computer program is executed by the processor to implement an information processing method.

[0164] Those skilled in the art can understand that Figure 7 The structure shown in the above figure is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. The specific computer device can include more or fewer components than those shown in the figure, or combine certain components, or have a different component arrangement.

[0165] In one embodiment, a computer device is also provided, which includes a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the steps in the above method embodiments.

[0166] In one embodiment, a computer readable storage medium is provided, which stores a computer program. The computer program is executed by a processor to implement the steps in the above method embodiments.

[0167] In one embodiment, a computer program product or computer program is provided, which includes computer instructions stored in a computer readable storage medium. The processor of the computer device reads the computer instructions from the computer readable storage medium, and the processor executes the computer instructions to make the computer device execute the steps in the above method embodiments.

[0168] It should be noted that the user information (including but not limited to user equipment information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in the present application are all information and data authorized by the user or authorized by all parties, and the collection, use and processing of related data need to comply with relevant laws, regulations and standards of relevant countries and regions.

[0169] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing related hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage medium. When the computer program is executed, it can include the processes of the above-mentioned embodiments of each method. In the embodiments provided in the present application, any reference to memory, storage, database or other medium can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory or optical memory, etc. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration but not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc.

[0170] The technical features of the above embodiments can be combined in any way. In order to make the description concise, not all possible combinations of the technical features in the above embodiments are described, but as long as the combination of the technical features does not exist contradictory, it should be considered as the scope of the present application.

[0171] The above embodiments only express several implementation manners of the present application, and the description is more specific and detailed, but it should not be understood as a limitation on the scope of the patent. It should be noted that for ordinary skilled in the art, without departing from the concept of the present application, some modifications and improvements can be made, which are all within the scope of the present application. Therefore, the protection scope of the patent of the present application should be subject to the appended claims.

Claims

1. An information processing method characterized by comprising: The method comprises: obtaining newly generated community messages from the last time of pulling messages from a target community to the current target community, the target community being a community of the social platform matched with a preset first type of keyword after logging in the corresponding social platform by using a preset social account, the community message comprising: group chat messages sent by group members of the target community in the target community, which can be viewed by members of the target community, and state information of the group members of the target community in the target community, the preset first type of keyword being a keyword of a community name related to a black production exchange information channel; determining target community messages matched with a preset second type of keyword in the community messages based on the preset second type of keyword, and extracting key information in the target community messages, the preset second type of keyword being a keyword related to information published by a black production exchange information channel, the preset second type of keyword comprising the preset first type of keyword, a preset sensitive word and a quantifier, the key information being information in the target community message conforming to an online resource strategy and other information related to an online resource, the key information comprising but not limited to a link address, a telephone number, an email address and a certificate number; comparing the key information with historical extracted key information; when the key information is included in the historical extracted key information, determining that the black production transaction information corresponding to the currently extracted key information has been obtained, and discarding the key information; when the key information is not included in the historical extracted key information, determining business data associated with the key information, and extracting associated business information in the associated business data, the business data being information related to a business service provided by an enterprise, the associated business information being related information for determining a business vulnerability and positioning a business content, the associated business information comprising but not limited to a business name, a domain name and information of an administrator in the business data; determining processing information based on the key information and the associated business information, and sending the processing information to a terminal of an enterprise security operation and maintenance personnel or a related personnel to prompt the enterprise security operation and maintenance personnel or the related personnel to know that there is a security problem in the business service, and there is a risk that the business is massively utilized for profit.

2. The method of claim 1, wherein, Before obtaining the community messages published by the target community, the method further comprises the steps of: logging in the corresponding social platform by using the preset social account through a robot module; pulling a target community account matched with the preset first type of keyword of the social platform through the robot module, and joining a target community corresponding to the target community account by using the preset social account.

3. The method of claim 2, wherein, Logging in the corresponding social platform by using the preset social account through the robot module comprises: starting the robot module, the robot module generating a data packet for interactive communication between a terminal and a server interface of the social platform corresponding to the preset social account by using the preset social account through an automatic script, and logging in the social platform based on the data packet.

4. The method of claim 2, wherein, Joining the target community corresponding to the target community account by using the preset social account comprises: Join a target social group corresponding to the target social group account through a social group joining interface of the social platform by the robot module.

5. The method of claim 4, wherein, Join a target social group corresponding to the target social group account through a social group joining interface of the social platform by the robot module, comprising: Send a group joining application information to join a target social group corresponding to the target social group account through a social group joining interface of the social platform by the robot module, the group joining application information comprising the target social group account and application content, the application content corresponding to a classification identifier of a preset first type keyword matched with the target social group account.

6. The method of claim 1, wherein, Determine the business data associated with the key information, comprising: According to the type of the key information, compare the key information with the business information of the type in the business data, and if there is associated business information as the comparison result, determine that the business data is associated with the key information.

7. The method according to any one of claims 1 to 6, characterized in that, The preset social account includes two or more; The login of the corresponding social platform by the robot module using the preset social account includes: Login the social platform corresponding to each of the preset social accounts in the preset social account table by the robot module using each of the preset social accounts.

8. The method according to any one of claims 1 to 6, characterized in that, The pulling of the target social group account matching the preset first type keyword of the social platform by the robot module includes: Pull the target social group account matching the preset first type keyword of the social platform by the robot module every first predetermined time interval.

9. The method according to any one of claims 1 to 6, characterized in that, After the login of the corresponding social platform by the robot module using the preset social account, it further includes: Make the preset social account keep online state on the social platform.

10. The method according to any one of claims 1 to 6, characterized in that, The pulling of the target social group account matching the preset first type keyword of the social platform by the robot module includes: The robot module pulls the target social group account matching the preset first type keyword returned by the social group search interface of the social platform.

11. The method according to any one of claims 1 to 6, characterized in that, The robot module pulls the target social group account matching the preset first type keyword returned by the social group search interface of the social platform, comprising: The robot module sends a social group search instruction containing the preset first type keyword through the social group search interface of the social platform, and obtains the target social group account matching the preset first type keyword returned by the social group search interface based on the social group search instruction.

12. The method of claim 11, wherein, The obtaining of the target social group account matching the preset first type keyword returned by the social group search interface based on the social group search instruction includes: Obtain the target social group account containing the preset first type keyword in the group name or group introduction returned by the social group search interface.

13. The method according to any one of claims 1 to 6, characterized in that, Obtain the social group message published by the target social group every second predetermined time interval.

14. The method of claim 13, wherein, Obtain the social group message published by the target social group every second predetermined time interval by calling the pulling information interface or the message pushing interface of the social platform through the message pulling interface.

15. The method according to any one of claims 1 to 6, characterized in that, The determination of the processing information based on the key information and the associated business information includes: Splice the key information and the associated business information, obtain the processing information.

16. An information processing apparatus comprising: The device comprises: The message acquisition module is configured to acquire a newly generated community message of a target community from the last time the message is pulled from the target community to the present, the target community being a community of the social platform that matches a preset first type of keyword after logging in to the corresponding social platform using a preset social account, and the community message comprising: a group chat message that can be viewed by members of the target community and sent by a group member of the target community, and state information of the group member of the target community in the target community, the preset first type of keyword being a keyword of a community name related to a black production exchange information channel; The key information extraction module is configured to determine a target community message that matches a preset second type of keyword in the community message based on the preset second type of keyword, and extract key information in the target community message, the preset second type of keyword being a keyword related to information published by a black production exchange information channel, the preset second type of keyword comprising the preset first type of keyword, a preset sensitive word, and a quantifier, and the key information comprising but not limited to an activity link, a phone number, and an email address; and compare the key information with historical extracted key information, and when the key information is included in the historical extracted key information, determine that black production transaction information corresponding to the currently extracted key information has been acquired, and discard the key information, the key information being information in the target community message that meets an online resource strategy and other information related to an online resource, and the key information comprising but not limited to a link address, a phone number, an email address, and an identification number; The associated business information extraction module is configured to determine business data associated with the key information when the key information is not included in the historical extracted key information, and extract associated business information in the associated business data, the business data being information related to a business service provided by an enterprise, and the associated business information being related information for determining a business vulnerability and positioning a business content, and the associated business information comprising but not limited to a business name, a domain name, and information of an administrator in the business data; The processing information determination module is configured to determine processing information based on the key information and the associated business information, and send the processing information to a terminal of an enterprise security and operation personnel or a related person, so as to prompt the enterprise security and operation personnel or the related person to know that there is a security problem in the business service, and there is a risk that the business is massively exploited for profit.

17. The apparatus of claim 16, wherein, The device further comprises: The robot module is configured to log in to the corresponding social platform using the preset social account, pull a target community account of the social platform that matches the preset first type of keyword, and join a target community corresponding to the target community account using the preset social account.

18. The apparatus of claim 17, wherein, The preset social account comprises two or more; The robot module logs in to the social platform corresponding to each of the preset social accounts in the preset social account table using each of the preset social accounts.

19. The apparatus of claim 17, wherein, The robot module pulls the target community account of the social platform matching the preset first type keyword every first predetermined time length.

20. The apparatus of claim 17, wherein, The robot module logs in the corresponding social platform using the preset social account, and keeps the preset social account online on the social platform.

21. The apparatus of claim 17, wherein, The robot module uses the preset social account to generate a data packet for interactive communication between a terminal and a server interface of the social platform corresponding to the preset social account based on an automatic script.

22. The apparatus of claim 17, wherein, The robot module pulls the target community account of the social platform matching the preset first type keyword returned by a community search interface of the social platform.

23. The apparatus of claim 22, wherein, The robot module sends a community search instruction containing the preset first type keyword through the community search interface of the social platform, and obtains the target community account matching the preset first type keyword returned by the community search interface based on the community search instruction.

24. The apparatus of claim 22, wherein, The robot module obtains the target community account containing the preset first type keyword in a community name or a community introduction returned by the community search interface.

25. The apparatus of claim 17, wherein, The robot module calls a community joining interface of the social platform to join the target community corresponding to the target community account.

26. The apparatus of claim 25, wherein, The robot module calls the community joining interface of the social platform to send group joining application information to join the target community corresponding to the target community account, wherein the group joining application information includes the target community account and application content corresponding to the classification identifier of the preset first type keyword matching the target community account.

27. The apparatus of claim 17, wherein, The robot module obtains the community message published by the target community every second predetermined time length after the target community is joined by the preset social account.

28. The apparatus of claim 17, wherein, The robot module obtains the community message published by the target community every second predetermined time length by calling a message pulling interface of the social platform.

29. The apparatus of any one of claims 17-28, wherein The association business information extraction module is configured to compare the key information with business information of a type in the business data according to the type of the key information, and determine that the business data is associated with the key information if there is associated business information.

30. The apparatus of any one of claims 17-28, wherein The processing information determination module is configured to splice the key information and the associated business information to obtain the processing information. 31.A computer device, comprising a memory and a processor, wherein the memory stores a computer program. The processor executes the computer program to implement the steps of the method of any one of claims 1-15.

32. A computer readable storage medium storing a computer program, wherein the computer program comprises instructions that, when executed by a computer, cause the computer to perform the method of any one of claims 1-31. The computer program is executed by the processor to implement the steps of the method of any one of claims 1-15.

33. A computer program product comprising a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method of any one of claims 1-15.

Images