Methods, devices, equipment, and storage media for adding honeypot numbers in business lines.

By determining and adding honeypot numbers according to preset rules in the information management system, the problems of missing honeypot numbers and low evaluation accuracy are solved, the fixed existence of honeypot numbers and accurate assessment of data leakage are achieved, and maintenance costs are reduced.

CN111966864BActive Publication Date: 2025-11-14WEBANK (CHINA)
View PDF 1 Cites 0 Cited by

Patent Information

Application Number
CN202010503777.5
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2020-06-04
Publication Date
2025-11-14
Estimated Expiration
2040-06-04

AI Technical Summary

Technical Problem

In business operations, honeypot accounts are prone to being missing, and the accuracy of assessing data leakage through honeypot accounts is low.

Method used

After detecting the acquisition command in the information management system, the honeypot number to be pre-embedded is determined according to the preset honeypot rules based on the customer number, and then added to the corresponding business line to generate a honeypot number table to assess the amount of data leakage.

Benefits of technology

It achieves the fixed immutability of honeypot numbers, prevents missing numbers, ensures that each business line has a honeypot number, improves the accuracy of data leakage assessment, and reduces maintenance costs.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN111966864B_ABST
    Figure CN111966864B_ABST
Patent Text Reader

Abstract

This invention discloses a method, apparatus, device, and storage medium for adding honeypot numbers to business lines, relating to the field of financial technology. The method for adding honeypot numbers to business lines includes the following steps: upon detecting an instruction to acquire a first customer number corresponding to each business line in an information management system, acquiring the first customer number corresponding to each business line according to the acquisition instruction; determining the honeypot number to be pre-embedded for each business line according to preset honeypot rules based on the first customer number corresponding to each business line; and adding the honeypot number to be pre-embedded to the corresponding business line. This invention enables the determination of the honeypot number corresponding to each business line based on honeypot rules, regardless of whether a honeypot number already exists in the business line, preventing missing honeypot numbers. Furthermore, the honeypot number allows for accurate assessment of the amount of customer data leakage in each business line, thereby improving the accuracy of data leakage assessment through honeypot numbers.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This invention relates to the field of data processing technology, and in particular to a method, apparatus, device, and storage medium for adding honeypot numbers in a business line. Background Technology

[0002] With the development of computer technology, more and more technologies are being applied in the financial field. The traditional financial industry is gradually transforming into financial technology (Fintech), and data processing technology is no exception. However, due to the security and real-time requirements of the financial industry, higher demands are being placed on data processing technology.

[0003] When an information management system assigns a customer number to a new customer, if a honeypot number is assigned, it will first create the honeypot number and then assign the new customer number. A customer number is a unique system identifier for the information management system; a honeypot number is a special customer number reserved by the information management system and not assigned to customers, used for alerts; a business line is an identifier for a business category in the information management system, with different business lines storing business data for the corresponding business category of each customer. When the information management system version is iterated, or customer number ranges are discontinued, honeypot numbers may become scarce. Furthermore, because the business data of different business lines is stored separately, if all newly added honeypot numbers fall into one business line, data leaks in other business lines will go undetected. If they fall into all business lines, it will inevitably lead to an uneven distribution of honeypot numbers to customer numbers, making it impossible to effectively assess the extent of data leakage after a leak occurs.

[0004] This indicates that honeypot accounts are currently prone to being missing in the business lines, and the accuracy of assessing data leakage through honeypot accounts is low. Summary of the Invention

[0005] The main objective of this invention is to provide a method, apparatus, device, and storage medium for adding honeypot numbers in business lines, aiming to solve the technical problems that existing business lines are prone to missing honeypot numbers and have low accuracy in assessing data leakage through honeypot numbers.

[0006] To achieve the above objectives, the present invention provides a method for adding honeypot numbers in a business line, the method comprising the steps of:

[0007] When an instruction to obtain the first customer number corresponding to each business line in the information management system is detected, the first customer number corresponding to each business line is obtained according to the instruction.

[0008] Based on the first customer number corresponding to each business line, determine the honeypot number to be pre-embedded for each business line according to the preset honeypot rules;

[0009] Add the honeypot number to be pre-embedded to the corresponding business line.

[0010] Optionally, the step of determining the honeypot number to be pre-embedded for each business line according to the first customer number corresponding to each business line and in accordance with preset honeypot rules includes:

[0011] The target honeypot number in the preset second customer number is determined according to the preset honeypot rules, wherein the second customer number includes the first customer number;

[0012] Based on the target honeypot number and the first customer number of each business line, the corresponding customer number range for each business line is determined, and the number of customers in the corresponding customer number range for each business line is determined based on the first customer number.

[0013] If the number of customers is greater than or equal to the threshold corresponding to the honeypot rule, then the upper limit honeypot number of the customer number range corresponding to the number of customers is determined as the honeypot number to be pre-embedded.

[0014] Optionally, after the steps of determining the corresponding customer number range for each business line based on the target honeypot number and the first customer number of each business line, and determining the number of customers of each business line in the corresponding customer number range based on the first customer number, the method further includes:

[0015] If the number of customers is less than the threshold corresponding to the honeypot rule, then the number of customers in the next customer number range for the business line is determined.

[0016] Add the number of customers in the previous customer number range to the number of customers in the next customer number range to get the total number of customers;

[0017] If the total number of customers is greater than or equal to the threshold corresponding to the honeypot rule, then the upper limit honeypot number corresponding to the next customer number range is determined as the honeypot number to be pre-embedded.

[0018] Optionally, after the step of adding the honeypot number to be pre-embedded to the corresponding business line, the method further includes:

[0019] Obtain the time information when the honeypot number to be pre-embedded is added to the corresponding business line, and add the time information as a time watermark to the honeypot number to be pre-embedded in the business line;

[0020] Generate a honeypot number table between the time information and the honeypot number to be pre-embedded, so as to determine the amount of customer information leakage through the honeypot number table.

[0021] Optionally, after the step of generating a honeypot number table between the time information and the honeypot numbers to be pre-embedded, so as to determine the amount of customer information leakage through the honeypot number table, the method further includes:

[0022] Once the leakage of customer information corresponding to the business line is detected, the leakage honeypot number corresponding to the leaked customer information is determined;

[0023] Obtain the time information corresponding to the leaked honeypot number, and determine the target honeypot number table corresponding to the leaked honeypot number based on the time information;

[0024] The amount of customer information leaked is determined based on the leaked honeypot number and the target honeypot number table.

[0025] Optionally, the step of obtaining the time information corresponding to the leaked honeypot number includes:

[0026] Obtain the time watermark from the leaked honeypot number, and determine the time information corresponding to the leaked honeypot number based on the time watermark.

[0027] Optionally, the step of determining the amount of customer information leaked based on the leaked honeypot number and the target honeypot number table includes:

[0028] Calculate the number of honeypot numbers in the target honeypot number table that carry the same time information as the leaked honeypot number;

[0029] The amount of customer information leaked is calculated based on the number of honeypot numbers.

[0030] Optionally, the step of obtaining the time information corresponding to the leaked honeypot number and determining the target honeypot number table corresponding to the leaked honeypot number based on the time information includes:

[0031] Obtain the time information corresponding to the leaked honeypot number, and determine whether the leaked honeypot number corresponds to at least two times based on the time information;

[0032] If it is determined that the leaked honeypot number corresponds to at least two times, then the target honeypot number table corresponding to the leaked honeypot number is determined based on the maximum time among the times corresponding to the leaked honeypot number.

[0033] Optionally, before the step of obtaining the first customer number corresponding to each business line according to the obtaining instruction after detecting the instruction to obtain the first customer number corresponding to each business line in the information management system, the method further includes:

[0034] Check if the current time is the time when the first customer number was obtained;

[0035] If the current time is detected as the time for obtaining the first customer number, then the instruction to obtain the first customer number is triggered.

[0036] Furthermore, to achieve the above objectives, the present invention also provides an apparatus for adding honeypot numbers in a business line, the apparatus comprising:

[0037] The acquisition module is used to acquire the first customer number corresponding to each business line according to the acquisition instruction after detecting the acquisition instruction for each business line in the information management system.

[0038] The determination module is used to determine the honeypot number to be pre-embedded for each business line according to the first customer number corresponding to each business line and the preset honeypot rules.

[0039] An add module is used to add the honeypot number to be pre-embedded to the corresponding business line.

[0040] Furthermore, to achieve the above objectives, the present invention also provides a device for adding honeypot numbers in a business line. The device for adding honeypot numbers in a business line includes a memory, a processor, and a program for adding honeypot numbers in a business line stored in the memory and executable on the processor. When the program for adding honeypot numbers in a business line is executed by the processor, it implements the steps of a method for adding honeypot numbers in a business line, such as that corresponding to a federated learning server.

[0041] In addition, to achieve the above objectives, the present invention also provides a computer-readable storage medium storing a program for adding honeypot numbers to a business line, wherein when the program for adding honeypot numbers to a business line is executed by a processor, it implements the steps of the method for adding honeypot numbers to a business line as described above.

[0042] This invention, upon detecting an instruction to acquire the first customer number corresponding to each business line in the information management system, retrieves the first customer number corresponding to each business line according to the instruction. Based on the first customer number corresponding to each business line, it determines the honeypot number to be pre-embedded for each business line according to preset honeypot rules and adds the honeypot number to the corresponding business line. This achieves the goal of determining the honeypot number corresponding to each business line according to the honeypot rules, regardless of whether the honeypot number already exists in the business line, preventing the loss of honeypot numbers. Furthermore, the honeypot number determined by the honeypot rules in this invention is fixed and unchanging; each business line has its own honeypot number. Therefore, the amount of customer data leakage in each business line can be accurately assessed through the honeypot number, thereby improving the accuracy of data leakage assessment through the honeypot number. Attached Figure Description

[0043] Figure 1 This is a flowchart illustrating the first embodiment of the method for adding honeypot numbers in a business line according to the present invention;

[0044] Figure 2 This is a flowchart illustrating the second embodiment of the method for adding honeypot numbers in a business line according to the present invention;

[0045] Figure 3This is a functional schematic diagram of a preferred embodiment of the device for adding honeypot numbers in the business line according to the present invention;

[0046] Figure 4 This is a schematic diagram of the hardware operating environment involved in the embodiments of the present invention.

[0047] The realization of the objective, functional features and advantages of the present invention will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0048] It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

[0049] This invention provides a method for adding honeypot numbers in a business line, referring to... Figure 1 , Figure 1 This is a flowchart illustrating the first embodiment of the method for adding honeypot numbers in a business line according to the present invention.

[0050] This invention provides an embodiment of a method for adding honeypot numbers in a business line. It should be noted that although the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than that shown here.

[0051] The method of adding honeypot numbers to business lines is applied in information management systems. Information management systems can include mobile terminals such as mobile phones, tablets, laptops, PDAs, and personal digital assistants (PDAs), as well as fixed terminals such as digital TVs and desktop computers. Methods for adding honeypot numbers to business lines include:

[0052] Step S10: After detecting the acquisition instruction for the first customer number corresponding to each business line in the information management system, the first customer number corresponding to each business line is acquired according to the acquisition instruction.

[0053] When the information management system detects and obtains the acquisition instruction for the customer number corresponding to each business line, it acquires the corresponding customer number for each business line according to the detected acquisition instruction. This acquisition instruction can be triggered by the user corresponding to the information management system based on specific needs, or it can be sent to the information management system by other terminal devices. In this embodiment, for differentiation, the customer number corresponding to each business line is recorded as the first customer number. Each business line corresponds to at least one customer number, that is, each business line corresponds to at least one first customer number. A user can exist in different business lines simultaneously, and the customer number of the same user is the same in different business lines. For example, if user A is in both the mortgage business line and the loan business line, then user A's customer number in both the mortgage business line and the loan business line is 0001. It should be noted that each business line has its own database, through which user data for each customer number can be stored. User data includes at least user identity data and business data. Identity data includes, but is not limited to, name, age, gender, phone number, ID card number, and home address. Business data is determined by the business line. For example, in the mortgage business line, business data includes, but is not limited to, the name, value, and location of the mortgaged property; in the loan business line, business data includes, but is not limited to, the loan amount, loan date, and guarantor's identity data. It is understandable that the same user may have the same user data across different business lines, but the business data may differ.

[0054] Step S20: Based on the first customer number corresponding to each business line, determine the honeypot number to be pre-buried for each business line according to the preset honeypot rules.

[0055] Once the information management system obtains the first customer number corresponding to each business line, it determines the honeypot number to be pre-embedded for each business line based on the first customer number and pre-defined honeypot rules. Specifically, the honeypot rules can be set by the users of the information management system according to their specific needs. For example, the honeypot rules can pre-set which customer numbers are designated as honeypot numbers; customer numbers such as 10, 50, 100, and 150 can be set as honeypot numbers. If the customer numbers for a certain business line are from 0 to 150, then according to the honeypot rules, 10, 50, 100, and 150 in that business line can be determined as honeypot numbers. Alternatively, users can set irregular honeypot numbers as needed.

[0056] Further, step S20 includes:

[0057] Step a: Determine the target honeypot number in the preset second customer number according to the preset honeypot rules, wherein the second customer number includes the first customer number.

[0058] Furthermore, after the information management system obtains the first customer number corresponding to each business line, it retrieves the pre-set honeypot rules and uses these rules to determine the target honeypot number from the preset second customer number set. It should be noted that the second customer number includes both the first customer number and the honeypot number. In the second customer number set, all numbers except the honeypot number are customer numbers. For example, if there are 10 second customer numbers (1, 2, 3, 4, 5, 6, 7, 8, 9, and 10), and customer numbers 3, 6, and 9 are honeypot numbers, then the remaining 7 second customer numbers (1, 2, 4, 5, 7, 8, and 10) can be used as the first customer number for each business line. Specifically, the honeypot rule can specify a target percentage for the honeypot number among the second customer numbers. This target percentage can be set according to specific needs, such as 1% or 5%. The honeypot baseline value in the honeypot rule can also be set according to specific needs, such as 0, 1, or 10. Once the information management system determines the target proportion of honeypot numbers in the honeypot rules, it can determine the target honeypot numbers among the second customer numbers based on the honeypot baseline value and the target proportion. For example, when the target proportion is 1%, the honeypot baseline value is 0, and the second customer numbers are set in an incrementing order of 1, 2, 3, 4…n, and the difference between any two adjacent second customer numbers is 1, the information management system can determine all second customer numbers that are multiples of 100 as target honeypot numbers. In this embodiment, the setting method of the second customer numbers is not limited; for example, the difference between any two adjacent second customer numbers can also be 2. For ease of calculation, the second customer numbers in this embodiment are set in an incrementing order.

[0059] Step b: Determine the customer number range corresponding to each business line based on the target honeypot number and the first customer number of each business line, and determine the number of customers of each business line in the corresponding customer number range based on the first customer number.

[0060] Step c: If the number of customers is greater than or equal to the threshold corresponding to the honeypot rule, then the upper limit honeypot number of the customer number range corresponding to the number of customers is determined as the honeypot number to be pre-embedded.

[0061] Once the information management system determines the target honeypot number, it determines the corresponding customer number range for each business line based on the target honeypot number and the first customer number of each business line. Specifically, if a business line has only one customer number range, the information management system obtains the minimum and maximum customer numbers of this range. It then determines the minimum honeypot number based on the minimum customer number and the maximum honeypot number based on the maximum customer number. Next, it determines the target honeypot number between the minimum and maximum honeypot numbers, and finally determines the corresponding customer number range for that business line based on this minimum, maximum, and the target honeypot numbers between the minimum and maximum honeypot numbers. For example, if the minimum honeypot number is 100 and the maximum honeypot number is 400, then the target honeypot numbers between the minimum and maximum honeypot numbers are 200 and 300. In this case, the corresponding customer number range for that business line can be determined as 100-200, 200-300, and 300-400. Specifically, the information management system determines the target honeypot number that is less than the minimum customer number and has the smallest difference from the minimum customer number as the minimum honeypot number, and determines the target honeypot number that is greater than the maximum customer number and has the smallest difference from the maximum customer number as the maximum honeypot number. It should be noted that when a business line has at least two customer number segments, the information management system needs to determine the corresponding maximum and minimum honeypot numbers for each customer number segment. That is, when a business line has multiple customer number segments, it needs to determine the customer number interval corresponding to each customer number segment, and then determine the customer number interval corresponding to all customer number segments of that business line as the customer number interval for that business line. It can be understood that any two adjacent target honeypot numbers form a customer number interval; the left adjacent target honeypot number is the lower limit honeypot number of that customer number interval, and the right adjacent target honeypot number is the upper limit honeypot number of that customer number interval. Within the customer number range, only the lower limit honeypot number and the upper limit honeypot number can be used as honeypot numbers to be pre-embedded. Apart from the lower limit honeypot number and the upper limit honeypot number, all other second customer numbers can be assigned to users as first customer numbers.

[0062] Understandably, since the second customer number is set in an incremental manner, the upper limit honeypot number of each customer number interval in this embodiment is greater than the lower limit honeypot number. After determining the customer number interval, the information management system determines the number of customers for each business line in each customer number interval based on the first customer number. It should be noted that the number of customers for each business line in the same customer number interval may be equal or unequal; not every business line will have a first customer number in every customer number interval. After the information management system obtains the number of customers for each business line in each customer number interval, it determines whether the number of customers for each business line in each customer number interval is greater than or equal to the threshold corresponding to the honeypot rule. This threshold is determined by the target ratio corresponding to the honeypot rule. For example, when the target ratio is 1%, the threshold is 99; when the target ratio is 5%, the threshold is 95. If the information management system determines that the number of customers for a business line in a customer number interval is greater than or equal to the threshold corresponding to the honeypot rule, the information management system determines the upper limit honeypot number of the customer number interval corresponding to the number of customers as the honeypot number to be pre-embedded. For example, if the number of customers in the customer number interval a of business line A is greater than or equal to the threshold corresponding to the honeypot rule, and the customer number interval a is a1-a2, that is, a1 is the lower limit honeypot number of the customer number interval a, a2 is the upper limit honeypot number of the customer number interval a, and a1 is less than a2, then it can be determined that a2 is the honeypot number to be pre-embedded.

[0063] Furthermore, step S20 also includes:

[0064] Step d: If the number of customers is less than the threshold corresponding to the honeypot rule, then determine the number of customers in the next customer number range for the business line.

[0065] Step e: Add the number of customers in the previous customer number range to the number of customers in the next customer number range to get the total number of customers.

[0066] Step f: If the total number of customers is greater than or equal to the threshold corresponding to the honeypot rule, then the upper limit honeypot number corresponding to the next customer number range is determined as the honeypot number to be pre-embedded.

[0067] Furthermore, if the information management system determines that the number of customers in the customer number range for a business line is less than the threshold corresponding to the honeypot rule, the information management system then determines the number of customers in the next customer number range for that business line. It adds the number of customers in the previous customer number range to the number of customers in the next customer number range to obtain the total number of customers. It can be understood that the number of customers in the previous customer number range is the number of customers when it is less than the threshold corresponding to the honeypot rule. After obtaining the total number of customers, the information management system determines whether the total number of customers is greater than or equal to the threshold corresponding to the honeypot rule. If the information management system determines that the total number of customers is greater than or equal to the threshold corresponding to the honeypot rule, the information management system will determine the upper limit honeypot number of the next customer number interval as the honeypot number to be pre-embedded; if the information management system determines that the total number of customers is less than the threshold corresponding to the honeypot rule, the information management system will obtain the number of customers in the next next customer number interval, add the number of customers in the next next customer number interval to the total number of customers, and obtain the summed number of customers. If the summed number of customers is greater than or equal to the threshold corresponding to the honeypot rule, the information management system will determine the upper limit honeypot number of the next next customer number interval as the honeypot number to be pre-embedded; if the summed number of customers is less than the threshold corresponding to the honeypot rule, the information management system will continue to obtain the number of customers in the next next customer number interval until all customer number intervals in this business line have been calculated.

[0068] For ease of understanding, the following examples are provided; please refer to the table below for specific details:

[0069]

[0070] In the table above, the target percentage for the honeypot rule is 1%, and the threshold for the honeypot rule is 99. In the cumulative value and threshold columns, the first value is the cumulative value, and the second value is the threshold. As shown in the table, each positive integer represents a second customer number, and there are a total of 3 business lines. The customer number range for the first business line is 100-350. Therefore, the customer number range corresponding to business line 1 is 100-200, 200-300, and 300-400. In the customer number range of 100-200, business line 1 has a total of 99 first customer numbers, meaning the number of customers at this time is 99, which is equal to the threshold corresponding to the honeypot rule. Therefore, the honeypot number to be pre-embedded can be determined to be 200. In the customer number range of 300-400, business line 1 has a total of 49 customer numbers: 301, 302, 303, 304, ..., 349. That is, the number of customers in the customer number range of 300-400 for business line 1 is 49, which is less than the threshold corresponding to the honeypot rule. Therefore, there is no corresponding honeypot number to be pre-embedded. Since 350 is the last customer number of the business line, the honeypot numbers to be pre-embedded for business line 1 can be determined to be 200 and 300. In business line 3, there are two customer number segments: 220-310 and 680-750, corresponding to customer number ranges of 200-300, 300-400, 600-700, and 700-800. The number of customers in the 200-300 range is 79, which is less than the honeypot rule threshold of 99. Continuing to calculate the number of customers in the next range, 300-400, the number is 9. The total number of customers in these two ranges is 79 + 9 = 88, which is less than the honeypot rule threshold. Continuing to calculate the number of customers in the next range, 600-700, the number is 19. The total number of customers in these three ranges is 79 + 9 + 19 = 107, which is greater than the honeypot rule threshold. Therefore, the upper limit honeypot number of the 600-700 range, 700, is set as the honeypot number to be pre-embedded.

[0071] Step S30: Add the honeypot number to be pre-embedded to the corresponding business line.

[0072] Once the information management system determines the honeypot number to be pre-embedded, it adds it to the corresponding business line. Specifically, during this process, the system determines the size relationship between the first customer number and the honeypot number to be pre-embedded in that business line. Based on this relationship, the system determines the pre-embedded position of the honeypot number in the business line in ascending order, and then adds it to that position. For example, if the honeypot number to be pre-embedded is 400, it can be determined that it should be placed between the first customer number 399 and the first customer number 401.

[0073] This embodiment detects and retrieves the first customer number corresponding to each business line in the information management system upon receiving the retrieval command. Based on this command, it retrieves the first customer number for each business line and determines the honeypot number to be pre-embedded for each business line according to preset honeypot rules. This honeypot number is then added to the corresponding business line. This ensures that regardless of whether a honeypot number already exists in a business line, the honeypot number can be determined according to the honeypot rules, preventing missing honeypot numbers. Furthermore, the honeypot numbers determined by the honeypot rules in this embodiment are fixed; each business line has its own honeypot number. Therefore, the amount of customer data leakage in each business line can be accurately assessed using the honeypot number, thus improving the accuracy of data leakage assessment. Further, the addition of honeypot numbers to business lines in this embodiment is implemented dynamically, requiring minimal manual intervention and reducing the maintenance cost of honeypot numbers.

[0074] Furthermore, a second embodiment of the method for adding honeypot numbers in a business line according to the present invention is proposed. The difference between the second embodiment and the first embodiment lies in that, referring to... Figure 2 The method for adding honeypot numbers in the business line also includes:

[0075] Step S40: Obtain the time information when the honeypot number to be pre-embedded is added to the corresponding business line, and add the time information as a time watermark to the honeypot number to be pre-embedded in the business line.

[0076] Step S50: Generate a honeypot number table between the time information and the honeypot number to be pre-embedded, so as to determine the amount of customer information leakage through the honeypot number table.

[0077] After the information management system adds the honeypot number to be pre-embedded to the corresponding business line, the system obtains the time information at which the honeypot number was added. In this embodiment, the time information can be specifically represented by year, month, day, and hour, or it can be represented by other numbers, such as using 118 to represent a specific day and 119 to represent another day. The unit of the time information can be days, hours, or minutes. After obtaining the time information, the information management system can generate a honeypot number table corresponding to the honeypot number to be pre-embedded and the first customer number, so as to determine the amount of customer information leakage through the honeypot number table.

[0078] Once the information management system obtains the time information, it adds the time information as a time watermark to the honeypot numbers to be pre-embedded in the business lines. For the same honeypot number, the corresponding time watermarks can be the same or different in different business lines. Same watermarks mean the same time information, and different watermarks mean different time information. For example, after creating a mobile phone number for a honeypot number, the time watermark corresponding to the time information can be added to the mobile phone number. This embodiment does not limit the form of the time watermark. For example, the time watermark can be four digits from the mobile phone number, representing a specific time information. The calculated value of time(NULL) / 86400%10000 is used as the time watermark and filled into the mobile phone number corresponding to the honeypot number. If the honeypot number is leaked, the time of the leak can be deduced from the time watermark in the mobile phone number corresponding to the honeypot number.

[0079] It's important to note that with the added timestamp, the date the honeypot number was updated becomes clear. The information management system then saves all honeypot numbers added to each business line, creating a honeypot number table that links each added honeypot number to its corresponding time information. Essentially, each time a honeypot number is added to a business line, the honeypot numbers within that business line are updated. Since the honeypot number table records the time each honeypot number was added to the business line, the number of honeypot numbers leaked each time can be used to determine the amount of customer information leaked, based on the honeypot rules and the number of honeypot numbers.

[0080] Furthermore, it's important to clarify that customer IDs for each business line are one-to-one with users. It's possible for a user to initially have customer information in business line A (i.e., their customer ID is in business line A), and then subsequently add information in business line B. In this case, the user's customer ID is also in business line B. For business line B, since the user already has a customer ID in business line A, the customer ID doesn't need to be reassigned and can be directly reused. When this happens frequently, it will disrupt the incremental allocation principle of customer IDs in business line B, causing the calculated number of honeypots to be pre-embedded to differ from before. This, combined, will increase the proportion of honeypots in the business lines. In this embodiment, the information management system updates the first customer number corresponding to the business line at regular intervals, and also updates the honeypot numbers in each business line at regular intervals. Each time the honeypot numbers in the business line are updated, the honeypot numbers are re-determined using honeypot rules. Therefore, the proportion of honeypot numbers in the business line is uniform after each update. There will be no situation where there are fewer customer numbers and more honeypot numbers in the business line, nor will there be a situation where there are more customer numbers and fewer honeypot numbers in the business line. This will not break the principle of incremental allocation of customer numbers in the business line, nor will it cause the proportion of honeypot numbers in the business line to increase.

[0081] Furthermore, the method for adding honeypot numbers in the business line also includes:

[0082] Step g: After detecting the leakage of customer information corresponding to the business line, determine the leak honeypot number corresponding to the leaked customer information.

[0083] Step h: Obtain the time information corresponding to the leaked honeypot number, and determine the target honeypot number table corresponding to the leaked honeypot number based on the time information.

[0084] Furthermore, the step of obtaining the time information corresponding to the leaked honeypot number includes:

[0085] Step h1: Obtain the time watermark in the leaked honeypot number, and determine the time information corresponding to the leaked honeypot number based on the time watermark.

[0086] Furthermore, when the information management system detects the leakage of customer information corresponding to a business line, it determines the leaked honeypot number corresponding to the leaked customer information. Specifically, when a honeypot number is leaked, it generates an alarm message, at which point the information management system can determine that the customer information stored in the business line containing that honeypot number has been leaked. After determining the leaked honeypot number, the information management system obtains the timestamp from the leaked honeypot number, determines the time information corresponding to the leaked honeypot number based on the timestamp, and then uses this time information to determine the target honeypot number table corresponding to the leaked honeypot number.

[0087] Further, step h includes:

[0088] Step h1: Obtain the time information corresponding to the leaked honeypot number, and determine whether the leaked honeypot number corresponds to at least two times based on the time information.

[0089] Step h2: If it is determined that the leaked honeypot number corresponds to at least two times, then the target honeypot number table corresponding to the leaked honeypot number is determined based on the maximum time among the times corresponding to the leaked honeypot number.

[0090] Furthermore, the information management system obtains the time information corresponding to the leaked honeypot ID and determines whether the leaked honeypot ID corresponds to at least two times based on this time information. It can be understood that when a leaked honeypot ID corresponds to at least two times, it indicates that the leaked honeypot ID corresponds to at least two honeypot ID tables, with one time corresponding to one honeypot ID table. If the information management system determines that the leaked honeypot ID corresponds to at least two times based on the time information, it determines the longest time among the times corresponding to the leaked honeypot ID and designates the honeypot ID table corresponding to the longest time as the target honeypot ID table for the leaked honeypot ID. If it determines that the time information of the leaked honeypot ID corresponds to only one time, the information management system designates the honeypot ID table corresponding to that time as the target honeypot ID table for the leaked honeypot ID.

[0091] Step i: Determine the amount of customer information leaked based on the leaked honeypot number and the target honeypot number table.

[0092] Further, step i includes:

[0093] Step i1: Calculate the number of honeypot numbers in the target honeypot number table that carry the same time information as the leaked honeypot number.

[0094] Step i2: Calculate the amount of customer information leaked based on the number of honeypot numbers.

[0095] Once the information management system identifies the leaked honeypot number and the target honeypot number table, it calculates the number of honeypot numbers in the target honeypot number table that carry the same time information as the leaked honeypot number. Then, based on this number, it calculates the amount of customer information that has been leaked. Specifically, the information management system divides the number of honeypot numbers by the target percentage corresponding to the honeypot rule to obtain the amount of customer information that has been leaked. For example, if there are 3 honeypot numbers carrying the same time information as the leaked honeypot number, and the target percentage corresponding to the honeypot rule is 1%, then the amount of customer information that has been leaked is determined to be 300.

[0096] This embodiment improves the efficiency of determining the amount of customer information leakage by generating a honeypot number table between the time information when the honeypot number to be pre-embedded is added to the corresponding business line and the honeypot number to be pre-embedded.

[0097] Furthermore, a third embodiment of the method for adding honeypot numbers in a business line according to the present invention is proposed. The difference between the third embodiment and the first and / or second embodiments of the method for adding honeypot numbers in a business line is that the third embodiment further includes:

[0098] Step j: Check if the current time is the time when the first customer number was obtained.

[0099] Step k: If the current time is detected as the time for obtaining the first customer number, then the instruction to obtain the first customer number is triggered.

[0100] The information management system checks whether the current time is the time for acquiring the first customer number. In this embodiment, the information management system pre-sets the acquisition frequency of the first customer number, and this embodiment does not specifically limit the duration corresponding to the acquisition frequency. Specifically, the information management system obtains the historical time of the last acquisition of the first customer number and calculates the time difference between the historical time and the current time. If the time difference is equal to or greater than the duration corresponding to the acquisition frequency, the information management system determines that the current time is the acquisition time. If the information management system detects that the current time is the time for acquiring the first customer number, the information management system triggers an acquisition instruction to acquire the first customer number, and acquires the first customer number of each business line according to the acquisition instruction. If the time difference is less than the duration corresponding to the acquisition frequency, the information management system continues to check whether the current time is the time for acquiring the first customer number.

[0101] Understandably, since the customer numbers in the business lines are constantly changing, this embodiment obtains the first customer number of each business line at regular intervals to update the honeypot number in each business line at regular intervals, thereby improving the accuracy of assessing the amount of data leakage through the honeypot number.

[0102] Furthermore, the present invention also provides an apparatus for adding honeypot numbers in a business line, as described above. Figure 3 The device for adding honeypot numbers in the business line includes:

[0103] The acquisition module 10 is used to acquire the first customer number corresponding to each business line according to the acquisition instruction after detecting the acquisition instruction for each business line in the information management system.

[0104] The determination module 20 is used to determine the honeypot number to be pre-embedded for each business line according to the first customer number corresponding to each business line and the preset honeypot rules.

[0105] Add module 30, used to add the honeypot number to be pre-embedded to the corresponding business line.

[0106] Furthermore, the determining module 20 is also used to determine the target honeypot number in the preset second customer number according to the preset honeypot rules, wherein the second customer number includes the first customer number; determine the customer number range corresponding to each business line according to the target honeypot number and the first customer number of each business line, and determine the number of customers of the business line in the corresponding customer number range according to the first customer number; if the number of customers is greater than or equal to the threshold corresponding to the honeypot rule, then determine the upper limit honeypot number of the customer number range corresponding to the number of customers as the honeypot number to be pre-embedded.

[0107] Furthermore, the determining module 20 is also used to determine the number of customers in the next customer number interval of the business line if the number of customers is less than the threshold corresponding to the honeypot rule; add the number of customers in the previous customer number interval to the number of customers in the next customer number interval to obtain the total number of customers; if the total number of customers is greater than or equal to the threshold corresponding to the honeypot rule, determine the upper limit honeypot number corresponding to the next customer number interval as the honeypot number to be pre-embedded.

[0108] Furthermore, the acquisition module 10 is also used to acquire the time information when the honeypot number to be pre-embedded is added to the corresponding business line;

[0109] The adding module 30 is also used to add the time information as a time watermark to the honeypot number to be pre-embedded in the business line;

[0110] The device for adding honeypot numbers to the business line also includes:

[0111] The generation module is used to generate a honeypot number table between the time information and the honeypot number to be pre-embedded, so as to determine the amount of customer information leakage through the honeypot number table.

[0112] Furthermore, the determining module 20 is also used to determine the leaked honeypot number corresponding to the leaked customer information after detecting the leakage of customer information corresponding to the business line;

[0113] The acquisition module 10 is also used to acquire the time information corresponding to the leaked honeypot number;

[0114] The determining module 20 is further configured to determine the target honeypot number table corresponding to the leaked honeypot number based on the time information; and to determine the amount of customer information leaked based on the leaked honeypot number and the target honeypot number table.

[0115] Furthermore, the acquisition module 10 is also used to acquire the time watermark in the leaked honeypot number and determine the time information corresponding to the leaked honeypot number based on the time watermark.

[0116] Furthermore, the determining module 20 includes:

[0117] The calculation unit is used to calculate the number of honeypot numbers in the target honeypot number table that carry the same time information as the leaked honeypot number; and to calculate the amount of customer information leaked based on the number of honeypot numbers.

[0118] Furthermore, the determining module 20 is also used to determine whether the leaked honeypot number corresponds to at least two times based on the time information; if it is determined that the leaked honeypot number corresponds to at least two times, then the target honeypot number table corresponding to the leaked honeypot number is determined based on the maximum time among the times corresponding to the leaked honeypot number.

[0119] Furthermore, the device for adding honeypot numbers to the business line also includes:

[0120] The detection module is used to detect whether the current time is the time when the first customer number was obtained;

[0121] The triggering module is used to trigger an instruction to obtain the first customer number if it detects that the current time is the time to obtain the first customer number.

[0122] The specific implementation of the device for adding honeypot numbers in the business line of the present invention is basically the same as the embodiments of the method for adding honeypot numbers in the business line described above, and will not be repeated here.

[0123] Furthermore, this invention also provides a device for adding honeypot numbers in a business line. For example... Figure 4 As shown, Figure 4 This is a schematic diagram of the hardware operating environment involved in the embodiments of the present invention.

[0124] It should be noted that, Figure 4 This can be seen as a schematic diagram of the hardware operating environment of a device that adds a honeypot ID to a business line. In this embodiment of the invention, the device that adds a honeypot ID to a business line can be a PC, a laptop, or other terminal device.

[0125] like Figure 4 As shown, the device for adding honeypot numbers to the business line may include: a processor 1001, such as a CPU; a memory 1005; a user interface 1003; a network interface 1004; and a communication bus 1002. The communication bus 1002 is used to enable communication between these components. The user interface 1003 may include a display screen or an input unit such as a keyboard; optionally, the user interface 1003 may also include a standard wired interface or a wireless interface. The network interface 1004 may optionally include a standard wired interface or a wireless interface (such as a Wi-Fi interface). The memory 1005 may be high-speed RAM or non-volatile memory, such as a disk drive. Optionally, the memory 1005 may also be a storage device independent of the aforementioned processor 1001.

[0126] Those skilled in the art will understand that Figure 4 The device structure shown in the diagram for adding honeypot numbers to a business line does not constitute a limitation on the device for adding honeypot numbers to a business line. It may include more or fewer components than shown, or combine certain components, or have different component arrangements.

[0127] like Figure 4As shown, the memory 1005, which serves as a computer storage medium, may include an operating system, a network communication module, a user interface module, and a program for adding honeypot numbers to the business lines. The operating system is a program that manages and controls the hardware and software resources of the device for adding honeypot numbers to the business lines, and supports the operation of the program for adding honeypot numbers to the business lines, as well as other software or programs.

[0128] exist Figure 4 In the device shown for adding honeypot numbers in the business line, the user interface 1003 is mainly used to connect to the terminal device and communicate with the terminal device, such as receiving the acquisition command sent by the terminal device; the network interface 1004 is mainly used for the backend server and communicates with the backend server; the processor 1001 can be used to call the program for adding honeypot numbers in the business line stored in the memory 1005 and execute the steps of the method for adding honeypot numbers in the business line as described above.

[0129] The specific implementation of the device for adding honeypot numbers in the business line in this invention is basically the same as the various embodiments of the method for adding honeypot numbers in the business line described above, and will not be repeated here.

[0130] Furthermore, embodiments of the present invention also propose a computer-readable storage medium storing a program for adding honeypot numbers to a business line. When the program for adding honeypot numbers to a business line is executed by a processor, it implements the steps of the method for adding honeypot numbers to a business line as described above.

[0131] The specific implementation of the computer-readable storage medium of the present invention is basically the same as the embodiments of the method for adding honeypot numbers in the business line described above, and will not be repeated here.

[0132] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0133] The sequence numbers of the above embodiments of the present invention are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0134] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions to cause a terminal device (which may be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in the various embodiments of the present invention.

[0135] The above are merely preferred embodiments of the present invention and do not limit the scope of the patent. Any equivalent structural or procedural transformations made based on the description and drawings of the present invention, or direct or indirect applications in other related technical fields, are similarly included within the scope of patent protection of the present invention.

Claims

1. A method for adding honeypot numbers in a business line, characterized in that, The method for adding honeypot numbers in the business line includes the following steps: Check if the current time is the time when the first customer number was obtained; If the current time is detected as the time for obtaining the first customer number, then the instruction to obtain the first customer number is triggered. When an instruction to obtain the first customer number corresponding to each business line in the information management system is detected, the first customer number corresponding to each business line is obtained according to the instruction. Based on the first customer number corresponding to each business line, determine the honeypot number to be pre-embedded for each business line according to the preset honeypot rules; Add the honeypot number to be pre-embedded to the corresponding business line; Obtain the time information when the honeypot number to be pre-embedded is added to the corresponding business line, and add the time information as a time watermark to the honeypot number to be pre-embedded in the business line; Generate a honeypot number table between the time information and the honeypot numbers to be pre-embedded; Once the leakage of customer information corresponding to the business line is detected, the leakage honeypot number corresponding to the leaked customer information is determined; Obtain the time information corresponding to the leaked honeypot number, and determine whether the leaked honeypot number corresponds to at least two times based on the time information; If it is determined that the leaked honeypot number corresponds to at least two times, then the target honeypot number table corresponding to the leaked honeypot number is determined based on the maximum time among the times corresponding to the leaked honeypot number; The amount of customer information leaked is determined based on the leaked honeypot number and the target honeypot number table.

2. The method for adding honeypot numbers in a business line as described in claim 1, characterized in that, The step of determining the honeypot number to be pre-embedded for each business line according to the first customer number corresponding to each business line and in accordance with the preset honeypot rules includes: The target honeypot number in the preset second customer number is determined according to the preset honeypot rules, wherein the second customer number includes the first customer number; Based on the target honeypot number and the first customer number of each business line, the corresponding customer number range for each business line is determined, and the number of customers in the corresponding customer number range for each business line is determined based on the first customer number. If the number of customers is greater than or equal to the threshold corresponding to the honeypot rule, then the upper limit honeypot number of the customer number range corresponding to the number of customers is determined as the honeypot number to be pre-embedded.

3. The method for adding honeypot numbers in a business line as described in claim 2, characterized in that, After the steps of determining the corresponding customer number range for each business line based on the target honeypot number and the first customer number of each business line, and determining the number of customers of each business line in the corresponding customer number range based on the first customer number, the method further includes: If the number of customers is less than the threshold corresponding to the honeypot rule, then the number of customers in the next customer number range for the business line is determined. Add the number of customers in the previous customer number range to the number of customers in the next customer number range to get the total number of customers; If the total number of customers is greater than or equal to the threshold corresponding to the honeypot rule, then the upper limit honeypot number corresponding to the next customer number range is determined as the honeypot number to be pre-embedded.

4. The method for adding honeypot numbers in a business line as described in claim 1, characterized in that, The step of obtaining the time information corresponding to the leaked honeypot number includes: Obtain the time watermark from the leaked honeypot number, and determine the time information corresponding to the leaked honeypot number based on the time watermark.

5. The method for adding honeypot numbers in a business line as described in claim 1, characterized in that, The step of determining the amount of customer information leaked based on the leaked honeypot number and the target honeypot number table includes: Calculate the number of honeypot numbers in the target honeypot number table that carry the same time information as the leaked honeypot number; The amount of customer information leaked is calculated based on the number of honeypot numbers.

6. An apparatus for adding honeypot numbers in a business line, characterized in that, The device for adding honeypot numbers in the business line includes: The detection module is used to detect whether the current time is the time when the first customer number was obtained; The triggering module is used to trigger an instruction to obtain the first customer number if it detects that the current time is the time to obtain the first customer number. The acquisition module is used to acquire the first customer number corresponding to each business line according to the acquisition instruction after detecting the acquisition instruction for each business line in the information management system. The determination module is used to determine the honeypot number to be pre-embedded for each business line according to the first customer number corresponding to each business line and the preset honeypot rules. An add module is used to add the honeypot number to be pre-embedded to the corresponding business line; The acquisition module is further configured to acquire the time information when the honeypot number to be pre-embedded is added to the corresponding business line; the addition module is further configured to add the time information as a time watermark to the honeypot number to be pre-embedded in the business line; The generation module is used to generate a honeypot number table between the time information and the honeypot numbers to be pre-embedded; The determining module is also used to determine the leak honeypot number corresponding to the leaked customer information after detecting the leakage of customer information corresponding to the business line. The acquisition module is also used to acquire the time information corresponding to the leaked honeypot number; The determining module is also used to determine, based on the time information, whether the leaked honeypot number corresponds to at least two times; If it is determined that the leaked honeypot number corresponds to at least two times, then the target honeypot number table corresponding to the leaked honeypot number is determined based on the maximum time among the times corresponding to the leaked honeypot number; The amount of customer information leaked is determined based on the leaked honeypot number and the target honeypot number table.

7. A device for adding honeypot numbers in a business line, characterized in that, The device for adding honeypot numbers in a business line includes a memory, a processor, and a program for adding honeypot numbers in a business line stored in the memory and executable on the processor. When the program for adding honeypot numbers in a business line is executed by the processor, it implements the steps of the method for adding honeypot numbers in a business line as described in any one of claims 1 to 5.

8. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a program for adding honeypot numbers to a business line, which, when executed by a processor, implements the steps of the method for adding honeypot numbers to a business line as described in any one of claims 1 to 5.

9. A computer program product, characterized in that, The computer program product stores readable instructions that, when read and executed by a computer, cause the computer to perform the method as described in any one of claims 1 to 5.

Citation Information

Patent Citations

  • Data leakage sensing method and device

    CN105975873A