Risk early warning method and device constructed based on dynamic rule, equipment and medium

Abstract

The invention discloses a risk early warning method and device constructed based on dynamic rules, equipment and a medium, and relates to the technical field of risk early warning, and the method comprises the steps: extracting a user static attribute and a dynamic behavior sequence, constructing an original data set, carrying out time sequence analysis, generating a behavior time sequence response feature, carrying out cross-modal feature fusion, and constructing a space-time perception behavior vector; constructing a dynamic rule graph structure according to the risk rule and the corresponding standard space-time perception behavior vector, iteratively updating a risk rule weight based on a graph convolutional network, constructing a wavelet domain risk quantification model, and generating a multi-scale risk value; and inputting the newly generated space-time perception behavior vector into the wavelet domain risk quantification model, generating a to-be-judged multi-scale risk value, and performing risk early warning when a threshold condition is not met. Through time sequence analysis and a multi-scale risk quantification model, the accuracy of risk identification is improved, and multi-dimensional and multi-scale risk analysis is supported, so that the accuracy and real-time performance of risk management are effectively improved.

Description

Technical Field

[0001] The present invention relates to the field of risk warning technology, and specifically to a risk warning method, device, equipment and medium based on dynamic rule construction. Background Art

[0002] With the rapid development of the digital economy, the point system is increasingly used in finance, e-commerce, membership services and other fields, becoming an important tool for user incentives and behavior management. The point system issues points based on factors such as user consumption behavior and activity, and promotes user interaction and loyalty through point redemption and point transfer. However, as the scale of the point system continues to expand and business scenarios become increasingly complex, traditional risk control methods face many challenges.

[0003] Existing risk control methods usually rely on static rules, which are based on preset user behavior patterns, such as the amount of points obtained, the frequency of redemption, and other indicators, to make risk control judgments. These static rules are generally configured manually, requiring detailed analysis and definition of possible risk scenarios, and setting constraints based on these definitions. Although this method can deal with some traditional risks, it is not flexible and has poor adaptability when dealing with new, complex and dynamically changing risks. The main problems include: difficulty in rule formulation. With the diversity and complexity of the business scenarios of the points system, the preset static rules often cannot fully cover all possible risk scenarios; poor adaptability. Since static rules cannot self-learn and update according to new data or user behavior patterns, they are prone to ignore new potential risks; large manual intervention. Existing risk control rules require a lot of manual intervention and adjustment, which not only increases the workload, but is also easily affected by human errors; false positives and false negatives. Static rules often cannot effectively distinguish between normal user behavior and risky behavior, resulting in false positives and false negatives, thereby affecting user experience. Summary of the invention

[0004] Based on the above-mentioned shortcomings of the prior art, the purpose of the present invention is to provide a risk warning method, device, equipment and medium based on dynamic rule construction to solve the above-mentioned technical problems.

[0005] To achieve the above object, the present invention provides the following technical solution: a risk early warning method based on dynamic rule construction, comprising: S1: extracting user static attributes and dynamic behavior sequences from the points system database, constructing an original data set, and preprocessing the original data set; S2: Perform temporal analysis on the preprocessed dynamic behavior sequence to generate behavior temporal response features, perform cross-modal feature fusion based on user static attributes, dynamic behavior sequence and behavior temporal response features, and construct a spatiotemporal perception behavior vector; S3: construct a dynamic rule graph structure according to the risk rules and the corresponding standard spatiotemporal perception behavior vectors, and iteratively update the risk rule weights of the dynamic rule graph structure based on a graph convolutional network; S4: All standard spatiotemporal perception behavior vectors are stacked row by row to form a spatiotemporal perception behavior matrix. According to the spatiotemporal perception behavior matrix and risk rule weights, a wavelet domain risk quantification model is constructed to generate a multi-scale risk value. S5: The newly generated spatiotemporal perception behavior vectors are repeatedly stacked in rows to form a spatiotemporal perception behavior matrix, which is input into the wavelet domain risk quantification model to generate a multi-scale risk value to be judged, and a threshold judgment is performed on the multi-scale risk value to be judged. When the threshold judgment result does not meet the threshold condition, a risk warning is issued.

[0006] The present invention is further configured such that the user static attributes include: user ID, age, gender, region, membership level and credit score; the dynamic behavior sequence includes: point change amount, point change type, point change frequency, and behavior time interval; and the original data set is preprocessed, including normalizing numerical parameters and discretizing non-numerical parameters.

[0007] The present invention is further configured such that the calculation logic of the behavior timing response feature is: ,in, is the behavior timing response characteristic, is the number of time points in the time window, The time window A point in time, For the Dynamic Behavior Sequence The features of the LSTM network output, is the attenuation coefficient, is the number of behavior patterns, For the The weight coefficient of each behavior mode, For the Dynamic Behavior Sequence Belong to The risk measure of a behavior pattern is is the number of dimensions of the behavioral temporal response feature, is the weight coefficient, is a nonlinear mapping function.

[0008] The present invention is further configured as follows: Dynamic Behavior Sequence Belong to Risk measurement for a behavior pattern The calculation logic is: ,in, It is used to ensure that the contribution of the behavior pattern to the risk metric is in the range [0, 1], For the The coefficient of the behavior mode, For the The number of features in a behavior pattern, For the Under the behavior mode The weight coefficient of the feature, Dynamic Behavior Sequence No. Features Nonlinear mapping function The calculation logic is: ,in, and is a transformation parameter used to control the dynamic behavior sequence Linear mapping of data, is an activation function used to compress the output value to the range of [-1, 1].

[0009] The present invention is further configured such that the calculation logic of cross-modal feature fusion is: ,in, is the spatiotemporal perception behavior vector, is a two-dimensional tensor, representing the interaction information of two-dimensional data. is the user's static attribute. is a dynamic behavior sequence, and represents tensor multiplication, is the activation function, is the number of features of the dynamic behavior sequence, For the The attention weight of each feature, is a nonlinear basis function used for the The features are transformed nonlinearly. is the weight matrix, is the convolution operation, For dynamic behavior sequences Perform pooling operation. is the hyperbolic tangent activation function.

[0010] The present invention is further configured such that, in step S3, the risk rule is set as a dynamic rule graph node, and the feature similarity of the corresponding standard spatiotemporal perception behavior vector is set as an edge weight; The calculation logic of the feature similarity of the corresponding standard spatiotemporal perception behavior vector is: ,in, For the and Between the risk control rules at the time The edge weights of is the similarity sensitivity coefficient, , and Respectively , and The standard spatiotemporal perception behavior vector corresponding to the risk rule, is the total number of risk rules; The update logic of risk rule weights is: , For graph convolution The risk rule weights of the layer, is a dynamic rule graph structure, For graph convolution The risk rule weights of the layer, For the The time-varying weight matrix of the layer, is the activation function.

[0011] The present invention is further configured that the calculation logic of the wavelet domain risk quantification model is: ,in, For the moment The risk value, is the time scale, is the scale adaptive weight, is the scale feature weight matrix, is the spatiotemporal perception behavior matrix, is the convolution operation, Represents the spatiotemporal perception behavior matrix and the scale weight matrix The convolution operation between is used to extract feature information at a specific scale. is the square of the Frobenius norm, is the scale-dependent threshold, and the scale-adaptive weight The calculation logic is: , is the scale adjustment factor.

[0012] The present invention also provides a risk warning device based on dynamic rule construction, which is used to implement the above-mentioned risk warning method based on dynamic rule construction. The system includes: The first construction module: extracting user static attributes and dynamic behavior sequences from the points system database, constructing an original data set, and preprocessing the original data set; Time series analysis module: performs time series analysis on the preprocessed dynamic behavior sequence, generates behavior time series response features, performs cross-modal feature fusion based on user static attributes, dynamic behavior sequence and behavior time series response features, and constructs spatiotemporal perception behavior vectors; The second construction module: construct a dynamic rule graph structure according to the risk rules and the corresponding standard spatiotemporal perception behavior vectors, and iteratively update the risk rule weights of the dynamic rule graph structure based on the graph convolutional network; The third construction module: stack all standard spatiotemporal perception behavior vectors in rows to form a spatiotemporal perception behavior matrix. According to the spatiotemporal perception behavior matrix and risk rule weights, a wavelet domain risk quantification model is constructed to generate multi-scale risk values. Risk warning module: The newly generated spatiotemporal perception behavior vectors are repeatedly stacked in rows to form a spatiotemporal perception behavior matrix, the wavelet domain risk quantification model is input, a multi-scale risk value to be judged is generated, a threshold judgment is performed on the multi-scale risk value to be judged, and a risk warning is issued when the threshold judgment result does not meet the threshold condition.

[0013] The present invention further provides an electronic device, comprising: one or more processors; A storage device is used to store one or more programs. When the one or more programs are executed by the one or more processors, the electronic device implements the risk warning method based on dynamic rules as described in any of the above.

[0014] The present invention also provides a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor of a computer, the computer is enabled to execute the risk warning method based on dynamic rules as described in any one of the above.

[0015] The present invention provides a risk warning method, device, equipment and medium based on dynamic rule construction. The method extracts user static attributes and dynamic behavior sequences from a scoring system database to construct an original data set, and preprocesses the original data set; performs time series analysis on the preprocessed dynamic behavior sequence to generate behavior time series response features, performs cross-modal feature fusion based on user static attributes, dynamic behavior sequences and behavior time series response features, and constructs a spatiotemporal perception behavior vector; constructs a dynamic rule graph structure according to risk rules and corresponding standard spatiotemporal perception behavior vectors, and iteratively updates risk rule weights for the dynamic rule graph structure based on a graph convolutional network; stacks all standard spatiotemporal perception behavior vectors in rows to form a spatiotemporal perception behavior matrix, and constructs a wavelet domain risk quantification model based on the spatiotemporal perception behavior matrix and risk rule weights to generate a multi-scale risk value; repeatedly stacks the newly generated spatiotemporal perception behavior vectors in rows to form a spatiotemporal perception behavior matrix, inputs the wavelet domain risk quantification model, generates a multi-scale risk value to be judged, performs threshold judgment on the multi-scale risk value to be judged, and performs a risk warning when the threshold judgment result does not meet the threshold condition. The beneficial effects produced include: 1. Enhanced the adaptability of the risk control system: By introducing dynamic rules and risk warning methods based on machine learning, the present invention can automatically learn and update risk control rules based on real-time data, thereby achieving dynamic adaptation of the risk warning system. The system can adjust risk assessment standards in a timely manner according to changes in user behavior patterns, avoiding the situation where traditional static rules cannot cope with emerging risks; 2. Improved accuracy of risk identification: Through time series analysis, behavior pattern recognition, and multi-scale risk quantification, it is possible to accurately identify potential risk behaviors. Compared with traditional static rule methods, this invention can effectively reduce false positives and false negatives, and improve the accuracy and effectiveness of risk control decisions. Especially when user behaviors are complex and changeable, risk identification based on dynamic rules significantly improves the ability to capture complex risks; 3. Support multi-dimensional risk analysis: A multi-scale risk quantification model is introduced, and combined with multi-dimensional information such as spatiotemporal perception behavior vectors, behavior time series response characteristics, and dynamic rule graph structures, it can comprehensively assess risks and analyze risks at different time scales. This multi-dimensional and multi-scale risk analysis method enables the system to effectively predict and warn both short-term risks and long-term trends, further improving the accuracy of risk management.

[0016] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for describing the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. In the drawings: Figure 1 A flowchart of a risk early warning method based on dynamic rule construction is shown as an exemplary embodiment of the present invention; Figure 2 The figure is a schematic diagram of the structure of a risk warning device based on dynamic rules according to an exemplary embodiment of the present invention. DETAILED DESCRIPTION

[0018] The following will describe the embodiments of the present invention with reference to the accompanying drawings and preferred embodiments. Those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention. It should be understood that the preferred embodiments are only for illustrating the present invention, not for limiting the scope of protection of the present invention.

[0019] It should be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present invention, and thus the drawings only show components related to the present invention rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.

[0020] In the following description, numerous details are discussed to provide a more thorough explanation of the embodiments of the present invention. However, it is obvious to those skilled in the art that the embodiments of the present invention can be implemented without these specific details. In other embodiments, well-known structures and devices are shown in the form of block diagrams rather than in detail to avoid making the embodiments of the present invention difficult to understand.

[0021] Embodiment 1 Risk early warning methods based on dynamic rules, such as Figure 1 As shown, including: S1: extracting user static attributes and dynamic behavior sequences from the points system database, constructing an original data set, and preprocessing the original data set; S2: Perform temporal analysis on the preprocessed dynamic behavior sequence to generate behavior temporal response features, perform cross-modal feature fusion based on user static attributes, dynamic behavior sequence and behavior temporal response features, and construct a spatiotemporal perception behavior vector; S3: construct a dynamic rule graph structure according to the risk rules and the corresponding standard spatiotemporal perception behavior vectors, and iteratively update the risk rule weights of the dynamic rule graph structure based on a graph convolutional network; S4: All standard spatiotemporal perception behavior vectors are stacked row by row to form a spatiotemporal perception behavior matrix. According to the spatiotemporal perception behavior matrix and risk rule weights, a wavelet domain risk quantification model is constructed to generate a multi-scale risk value. S5: The newly generated spatiotemporal perception behavior vectors are repeatedly stacked in rows to form a spatiotemporal perception behavior matrix, which is input into the wavelet domain risk quantification model to generate a multi-scale risk value to be judged, and a threshold judgment is performed on the multi-scale risk value to be judged. When the threshold judgment result does not meet the threshold condition, a risk warning is issued.

[0022] The present invention is further configured such that the user static attributes include: user ID, age, gender, region, membership level and credit score; the dynamic behavior sequence includes: point change amount, point change type, point change frequency, and behavior time interval; the original data set is preprocessed, including normalizing the numerical parameters and discretizing the non-numerical parameters. Specifically, the point change amount refers to the increase or decrease in the number of points of the user in each transaction, reflecting the user's point acquisition and consumption behavior; the point change type refers to the category of point increase or decrease; the point change frequency refers to the frequency of the user's point change, that is, the number of times the points change per unit time; the behavior time interval refers to the time difference between user behaviors, indicating the interval time between two behaviors; discretizing the non-numerical parameters means converting them into a numerical form that can be processed by a computer, including: label encoding: mapping each category to a unique integer; unique hot encoding: representing each category as a binary vector. This is a prior art and is not limited here.

[0023] The present invention is further configured such that the calculation logic of the behavior timing response feature is: ,in, is the behavior temporal response characteristic, is the number of time points in the time window, The time window A point in time, For the Dynamic Behavior Sequence The features of the LSTM network output, is the attenuation coefficient, is the number of behavior patterns, For the The weight coefficient of each behavior mode, For the Dynamic Behavior Sequence Belong to The risk measure of a behavior pattern is is the number of dimensions of the behavioral temporal response feature, is the weight coefficient, is a nonlinear mapping function. Specifically, the behavior time series response feature is a feature obtained by integrating all time points and behavior sequences in the time window, which represents the behavior response of the user over a period of time. This feature reflects the relationship between the behavior sequence and the user's final response. LSTM (Long Short-Term Memory Network) is a special type of recurrent neural network (RNN) that is particularly suitable for processing and predicting sequence data. LSTM network can effectively capture and store long-term dependency information, which makes it very suitable for processing dynamic behavior sequences. In the above calculation logic, LSTM network is used to extract time-dependent features from the dynamic behavior sequence at each time point and generate feature outputs suitable for subsequent calculations; behavior patterns represent the classification of user behaviors, including different types of behaviors or states. Risk metrics measure the risk or importance of a user at a certain moment when he belongs to a specific behavior pattern. In a feasible embodiment of the present invention, the behavior pattern is a standard spatiotemporal perception behavior vector corresponding to the risk rule; the nonlinear mapping function is used to map the input behavior sequence to a specific response feature dimension, and process the sequence data in a nonlinear manner. By comprehensively considering time dependency, behavior pattern and risk metrics, the user's behavior response can be more accurately predicted, especially in a complex dynamic environment.

[0024] The present invention is further configured as follows: Dynamic Behavior Sequence Belong to Risk measurement for a behavior pattern The calculation logic is: ,in, It is used to ensure that the contribution of the behavior pattern to the risk metric is in the range [0, 1], For the The coefficient of the behavior mode, For the The number of features in a behavior pattern, For the Under the behavior mode The weight coefficient of the feature, Dynamic Behavior Sequence No. characteristics; specifically, to assess the Dynamic Behavior Sequence Belong to The risk level of each behavior pattern. By using the sigmoid activation function, the output risk metric value is ensured to be in the range of [0,1]; Nonlinear mapping function The calculation logic is: ,in, and is a transformation parameter used to control the dynamic behavior sequence Linear mapping of data, is an activation function used to compress the output value to the range [-1, 1]. Specifically, the nonlinear mapping function For dynamic behavior sequences Nonlinear mapping is performed to further extract and process behavioral features. The input data is mapped to the range of [-1,1] through the tanh activation function; by extracting features and performing nonlinear mapping on dynamic behavior sequences, the user's behavior pattern can be effectively identified. Combining risk measurement and nonlinear mapping functions, the model can better understand the potential risks and changing trends of user behavior and improve the accuracy of behavior prediction.

[0025] The present invention is further configured such that the calculation logic of cross-modal feature fusion is: ,in, is the spatiotemporal perception behavior vector, is a two-dimensional tensor, representing the interaction information of two-dimensional data. is the user's static attribute. is a dynamic behavior sequence, and represents tensor multiplication, is the activation function, is the number of features of the dynamic behavior sequence, For the The attention weight of each feature, is a nonlinear basis function used for the The features are transformed nonlinearly. is the weight matrix, is the convolution operation, For dynamic behavior sequences Perform pooling operation. is the hyperbolic tangent activation function. Specifically, the spatiotemporal perception behavior vector is the final representation obtained through cross-modal feature fusion, which integrates the user's static attributes and dynamic behavior sequence, and transforms the user's behavior, preferences, and historical activities into a feature that can be used by machine learning algorithms; two-dimensional tensor is a matrix that represents the interaction information between the user's static attributes and dynamic behavior sequence. Tensor multiplication Used to model the relationship between the two. Through the calculation of two-dimensional tensors, the model can capture the interaction between static attributes and dynamic behaviors, thereby generating a more accurate representation of user behavior features. Convolution operation is an operation commonly used to process structured grid data, especially in computer vision and time series analysis. Here, the convolution operation is used to combine the weight matrix and the pooled dynamic behavior sequence. The convolution operation helps the model establish local associations between features, thereby enhancing the model's expressive power, especially when processing features with temporal or spatial correlations; pooling operation is a common data dimensionality reduction technique, especially widely used in deep learning. It is used to downsample dynamic behavior sequences and retain the most important information. Pooling operations help reduce the amount of data, improve computational efficiency, and retain the most representative information in the feature space to prevent overfitting; nonlinear basis functions are used to perform nonlinear transformations on input features to enhance the nonlinear expressive power of the model. By introducing nonlinear transformations, the model can better fit complex behavior patterns and data relationships. Nonlinear mapping improves the model's ability to learn complex feature relationships and can capture potential patterns and changing trends in user behavior. Through cross-modal feature fusion, the user's static attributes and dynamic behavior sequences can be effectively combined to generate more accurate spatiotemporal perception behavior vectors, thereby improving the accuracy of behavior prediction. By introducing nonlinear mapping and attention mechanisms, the model can capture complex feature relationships and improve the understanding and prediction capabilities of user behavior.

[0026] The present invention is further configured such that, in step S3, the risk rule is set as a dynamic rule graph node, and the feature similarity of the corresponding standard spatiotemporal perception behavior vector is set as an edge weight; The calculation logic of the feature similarity of the corresponding standard spatiotemporal perception behavior vector is: ,in, For the and Between the risk control rules at the time The edge weights of is the similarity sensitivity coefficient, , and Respectively , and The standard spatiotemporal perception behavior vector corresponding to the risk rule, is the total number of risk rules; specifically, the feature similarity between risk rules is calculated, and the difference measure (Euclidean distance) of spatiotemporal perception behavior vectors is used to determine the edge weight according to the distance. By standardizing all rules, the similarity of each pair of rules is obtained. The update logic of risk rule weights is: , For graph convolution The risk rule weights of the layer, is a dynamic rule graph structure, For graph convolution The risk rule weights of the layer, For the The time-varying weight matrix of the layer, is the activation function. Specifically, the graph convolution operation is performed through the graph structure and the weight matrix Calculate the risk rule weights for the next layer By applying the ReLU activation function, the updated weights have nonlinear characteristics, thereby enhancing the expressiveness of the model. Through cross-modal feature fusion and graph convolution operations, the model can better capture and represent the relationship between complex user behavior patterns and rules; the risk rule graph combined with the spatiotemporal perception behavior vector can more accurately assess the risk of each behavior pattern, thereby helping the decision-making system to make more accurate predictions.

[0027] The present invention is further configured that the calculation logic of the wavelet domain risk quantification model is: ,in, For the moment The risk value, is the time scale, is the scale-adaptive weight, is the scale feature weight matrix, is the spatiotemporal perception behavior matrix, is the convolution operation, Represents the spatiotemporal perception behavior matrix and the scale weight matrix The convolution operation between is used to extract feature information at a specific scale. is the square of the Frobenius norm, is the scale-dependent threshold, and the scale-adaptive weight The calculation logic is: , Specifically, the wavelet domain risk quantification model combines the spatiotemporal perception behavior matrix and wavelet transform, realizes the dynamic modeling of risk quantification through multi-scale feature extraction and scale adaptive adjustment, and can extract the user's behavior characteristics at different time scales through wavelet transform and convolution operations, which helps to identify short-term and long-term behavior patterns, thereby improving the accuracy of risk quantification. It can automatically adjust the importance of features of different scales in the model as time changes, thereby enhancing the adaptability and flexibility of the model.

[0028] In step S5, the generated spatiotemporal perception behavior vector represents the behavior characteristics of the user at a certain moment, and contains information about the user's dynamic behavior and static attributes. The spatiotemporal perception behavior vector is repeatedly stacked row by row to construct a spatiotemporal perception behavior matrix. The repeated stacking operation stacks the user behavior characteristics into a spatiotemporal perception behavior matrix that complies with the input; the spatiotemporal perception behavior matrix is ​​used as input and sent to the wavelet domain risk quantification model for risk calculation. The model will perform in-depth analysis of the user's behavior through multi-scale feature extraction and convolution operations, and calculate the risk value at each time scale. The output result of the wavelet domain risk quantification model is the multi-scale risk value to be judged. Each scale represents a different time dimension. The model will generate a corresponding risk value based on the long-term and short-term dependencies in the behavior data. The multi-scale risk value assigns a risk score to each behavior pattern, reflecting the risk level of the behavior at different time scales; the generated multi-scale risk value is threshold judged, that is, by comparing with the preset risk threshold, it is determined whether the current risk exceeds the predetermined safety range. If the threshold judgment result does not meet the preset conditions, that is, the risk value exceeds the set threshold, the system will trigger a risk warning. Through threshold judgment, the system can automatically detect abnormal high-risk behaviors and issue warnings, helping managers or decision-making systems take timely measures.

[0029] Embodiment 2 See also Figure 2 The exemplary risk warning device based on dynamic rule construction is used to implement the above-mentioned risk warning method based on dynamic rule construction, and the system includes: The first construction module: extracting user static attributes and dynamic behavior sequences from the points system database, constructing an original data set, and preprocessing the original data set; Time series analysis module: performs time series analysis on the preprocessed dynamic behavior sequence, generates behavior time series response features, performs cross-modal feature fusion based on user static attributes, dynamic behavior sequence and behavior time series response features, and constructs spatiotemporal perception behavior vectors; The second construction module: construct a dynamic rule graph structure according to the risk rules and the corresponding standard spatiotemporal perception behavior vectors, and iteratively update the risk rule weights of the dynamic rule graph structure based on the graph convolutional network; The third construction module: stack all standard spatiotemporal perception behavior vectors in rows to form a spatiotemporal perception behavior matrix. According to the spatiotemporal perception behavior matrix and risk rule weights, a wavelet domain risk quantification model is constructed to generate multi-scale risk values. Risk warning module: The newly generated spatiotemporal perception behavior vectors are repeatedly stacked in rows to form a spatiotemporal perception behavior matrix, the wavelet domain risk quantification model is input, a multi-scale risk value to be judged is generated, a threshold judgment is performed on the multi-scale risk value to be judged, and a risk warning is issued when the threshold judgment result does not meet the threshold condition.

[0030] It should be noted that the risk warning device based on dynamic rules provided in the above embodiment and the risk warning method based on dynamic rules provided in the above embodiment belong to the same concept, wherein the specific manner in which each module and unit performs operations has been described in detail in the method embodiment and will not be repeated here. In actual applications, the risk warning device based on dynamic rules provided in the above embodiment can distribute the above functions to different functional modules as needed, that is, divide the internal structure of the system into different functional modules to complete all or part of the functions described above, and this is not limited here.

[0031] An embodiment of the present application also provides an electronic device, comprising: one or more processors; a storage device for storing one or more programs, and when the one or more programs are executed by the one or more processors, the electronic device implements the risk warning method based on dynamic rule construction provided in the above-mentioned embodiments.

[0032] The embodiment of the present application also provides a computer system of an electronic device. It should be noted that the computer system of an electronic device is only an example and should not bring any limitation to the function and scope of use of the embodiment of the present application.

[0033] Specifically, the computer system includes a central processing unit (CPU), which can perform various appropriate actions and processes according to the program stored in the read-only memory (ROM) or the program loaded from the storage part to the random access memory (RAM), such as executing the method described in the above embodiment. In the RAM, various programs and data required for system operation are also stored. The CPU, ROM and RAM are connected to each other through a bus. The input / output (I / O) interface is also connected to the bus.

[0034] The following components are connected to the I / O interface: an input section including a keyboard, a mouse, etc.; an output section including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker; a storage section including a hard disk, etc.; and a communication section including a network interface card such as a LAN (Local Area Network) card, a modem, etc. The communication section performs communication processing via a network such as the Internet. A drive is also connected to the I / O interface as needed. Removable media, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., are installed on the drive as needed so that a computer program read therefrom is installed into the storage section as needed.

[0035] In particular, according to an embodiment of the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present application includes a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a computer program for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication part, and / or installed from a removable medium. When the computer program is executed by a central processing unit (CPU), various functions defined in the system of the present application are executed.

[0036] It should be noted that the computer-readable medium shown in the embodiment of the present application may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM), a flash memory, an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present application, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier, which carries a computer-readable computer program. This propagated data signal may take a variety of forms, including but not limited to an electromagnetic signal, an optical signal, or any suitable combination of the above. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. A computer program contained on a computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0037] The units involved in the embodiments described in this application may be implemented by software or hardware, and the units described may also be set in a processor. The names of these units do not, in some cases, constitute limitations on the units themselves.

[0038] Another aspect of the present application also provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, the risk warning method based on dynamic rule construction as described above is implemented. The computer-readable storage medium can be included in the electronic device described in the above embodiment, or it can exist independently without being assembled into the electronic device.

[0039] Another aspect of the present application also provides a computer program product or computer program, which includes computer instructions stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the risk warning method based on dynamic rule construction provided in each of the above embodiments.

[0040] The above embodiments are merely illustrative of the principles and effects of the present invention, and are not intended to limit the present invention. Anyone familiar with the technology may modify or change the above embodiments without violating the spirit and scope of the present invention. Therefore, all equivalent modifications or changes made by a person of ordinary skill in the art without departing from the spirit and technical ideas disclosed by the present invention shall still be covered by the claims of the present invention.

Claims

1. The risk early warning method based on dynamic rules is characterized by: include: S1: extracting user static attributes and dynamic behavior sequences from the points system database, constructing an original data set, and preprocessing the original data set; S2: Perform temporal analysis on the preprocessed dynamic behavior sequence to generate behavior temporal response features, perform cross-modal feature fusion based on user static attributes, dynamic behavior sequence and behavior temporal response features, and construct a spatiotemporal perception behavior vector; S3: construct a dynamic rule graph structure according to the risk rules and the corresponding standard spatiotemporal perception behavior vectors, and iteratively update the risk rule weights of the dynamic rule graph structure based on a graph convolutional network; S4: All standard spatiotemporal perception behavior vectors are stacked row by row to form a spatiotemporal perception behavior matrix. According to the spatiotemporal perception behavior matrix and risk rule weights, a wavelet domain risk quantification model is constructed to generate a multi-scale risk value. S5: The newly generated spatiotemporal perception behavior vectors are repeatedly stacked in rows to form a spatiotemporal perception behavior matrix, which is input into the wavelet domain risk quantification model to generate a multi-scale risk value to be judged, and a threshold judgment is performed on the multi-scale risk value to be judged. When the threshold judgment result does not meet the threshold condition, a risk warning is issued.

2. The risk early warning method based on dynamic rule construction according to claim 1 is characterized in that: The user static attributes include: user ID, age, gender, region, membership level and credit score; the dynamic behavior sequence includes: point change amount, point change type, point change frequency, and behavior time interval; the original data set is preprocessed, including normalizing numerical parameters and discretizing non-numerical parameters.

3. The risk early warning method based on dynamic rule construction according to claim 2 is characterized in that: The calculation logic of the behavior timing response feature is: ,in, is the behavior temporal response characteristic, is the number of time points in the time window, The time window A point in time, For the Dynamic Behavior Sequence The features of the LSTM network output, is the attenuation coefficient, is the number of behavior patterns, For the The weight coefficient of each behavior mode, For the Dynamic Behavior Sequence Belong to The risk measure of a behavior pattern is is the number of dimensions of the behavioral temporal response feature, is the weight coefficient, is a nonlinear mapping function.

4. The risk early warning method based on dynamic rule construction according to claim 3 is characterized in that: No. Dynamic Behavior Sequence Belong to Risk measurement for a behavior pattern The calculation logic is: ,in, It is used to ensure that the contribution of the behavior pattern to the risk metric is in the range [0, 1], For the The coefficient of the behavior mode, For the The number of features in a behavior pattern, For the Under the behavior mode The weight coefficient of the feature, Dynamic Behavior Sequence No. Features Nonlinear mapping function The calculation logic is: ,in, and is a transformation parameter used to control the dynamic behavior sequence Linear mapping of data, is an activation function used to compress the output value to the range of [-1, 1].

5. The risk early warning method based on dynamic rule construction according to claim 4 is characterized in that: The calculation logic of cross-modal feature fusion is: ,in, is the spatiotemporal perception behavior vector, is a two-dimensional tensor, representing the interaction information of two-dimensional data. is the user's static attribute. is a dynamic behavior sequence, and represents tensor multiplication, is the activation function, is the number of features of the dynamic behavior sequence, For the The attention weight of each feature, is a nonlinear basis function used for the The features are transformed nonlinearly. is the weight matrix, is the convolution operation, For dynamic behavior sequences Perform pooling operation. is the hyperbolic tangent activation function.

6. The risk early warning method based on dynamic rule construction according to claim 1 is characterized in that: In step S3, the risk rule is set as a dynamic rule graph node, and the feature similarity of the corresponding standard spatiotemporal perception behavior vector is set as an edge weight; The calculation logic of the feature similarity of the corresponding standard spatiotemporal perception behavior vector is: ,in, For the and Between the risk control rules at the time The edge weights of is the similarity sensitivity coefficient, , and Respectively , and The standard spatiotemporal perception behavior vector corresponding to the risk rule, is the total number of risk rules; The update logic of risk rule weights is: , For graph convolution The risk rule weights of the layer, is a dynamic rule graph structure, For graph convolution The risk rule weights of the layer, For the The time-varying weight matrix of the layer, is the activation function.

7. The risk early warning method based on dynamic rule construction according to claim 1 is characterized in that: The calculation logic of the wavelet domain risk quantification model is: ,in, For the moment The risk value, is the time scale, is the scale-adaptive weight, is the scale feature weight matrix, is the spatiotemporal perception behavior matrix, is the convolution operation, Represents the spatiotemporal perception behavior matrix and the scale weight matrix The convolution operation between is used to extract feature information at a specific scale. is the square of the Frobenius norm, is the scale-dependent threshold, and the scale-adaptive weight The calculation logic is: , is the scale adjustment factor.

8. A risk warning device based on dynamic rule construction, used to implement the risk warning method based on dynamic rule construction as described in any one of claims 1 to 7, characterized in that: include: The first construction module: extracting user static attributes and dynamic behavior sequences from the points system database, constructing an original data set, and preprocessing the original data set; Time series analysis module: performs time series analysis on the preprocessed dynamic behavior sequence, generates behavior time series response features, performs cross-modal feature fusion based on user static attributes, dynamic behavior sequence and behavior time series response features, and constructs spatiotemporal perception behavior vectors; The second construction module: construct a dynamic rule graph structure according to the risk rules and the corresponding standard spatiotemporal perception behavior vectors, and iteratively update the risk rule weights of the dynamic rule graph structure based on the graph convolutional network; The third construction module: stack all standard spatiotemporal perception behavior vectors in rows to form a spatiotemporal perception behavior matrix. According to the spatiotemporal perception behavior matrix and risk rule weights, a wavelet domain risk quantification model is constructed to generate multi-scale risk values. Risk warning module: The newly generated spatiotemporal perception behavior vectors are repeatedly stacked in rows to form a spatiotemporal perception behavior matrix, the wavelet domain risk quantification model is input, a multi-scale risk value to be judged is generated, a threshold judgment is performed on the multi-scale risk value to be judged, and a risk warning is issued when the threshold judgment result does not meet the threshold condition.

9. An electronic device, characterized in that: The electronic device comprises: one or more processors; A storage device for storing one or more programs, which, when executed by the one or more processors, enables the electronic device to implement the risk warning method based on dynamic rule construction as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: A computer program is stored thereon, and when the computer program is executed by a processor of a computer, the computer is caused to execute the risk warning method based on dynamic rule construction as described in any one of claims 1 to 7.

Images