Account risk prevention and control method, device, system and medium based on device fingerprint

Abstract

The present disclosure provides an account risk prevention and control method based on device fingerprint, which is applied to the field of financial technology, including: obtaining the device fingerprint ID of the device running the account system; when the user initiates an account registration application through the account system, based on the device fingerprint ID, obtaining the current registration frequency of the device; if the current registration frequency does not meet the preset frequency, intercepting the account registration application. The present disclosure also provides another account risk prevention and control method based on device fingerprint, including: obtaining the device fingerprint ID of the device running the account system; when the user conducts transactions through the account system, based on the device fingerprint ID, determining whether the device is a user's commonly used device or a historically used device; if the device is not a user's commonly used device, pushing a risk prompt to the user for intervention. The method provided by the embodiments of the present disclosure can effectively reduce the risk of false registration and account theft.

Description

Technical Field

[0001] The present disclosure relates to the field of financial technology, and more specifically, to an account risk prevention and control method, apparatus, computer system and computer-readable storage medium based on device fingerprint. Background Art

[0002] With the rapid development of the Internet industry, the scale of Internet users has expanded rapidly, and more and more transactions are conducted online. At the same time, it has also spawned a black industry chain such as false registration and account theft, which seriously endangers the health of the network and the property safety of users. Especially in banking business, once the user's account information is stolen by criminals, and the user's funds are stolen through false registration or theft of forged customer information, it will cause huge economic losses to the user.

[0003] At present, banks' account security control is still limited to verifying the real identity of customers, and they have only deployed some simple control measures, such as judging the rules for frequent account opening and closing based on information such as ID number, IP, MAC, etc. This method was feasible for handling business at the counter in the past, but in online channels such as online banking and mobile banking, this control measure can be easily cracked by generating false information, tampering with device information, forging customer facial information, etc., causing serious losses. Summary of the invention

[0004] In view of this, the present disclosure provides an account risk prevention and control method, apparatus, computer system and computer-readable storage medium based on device fingerprint.

[0005] One aspect of the present disclosure provides an account risk prevention and control method based on device fingerprint, including: obtaining a device fingerprint ID of a device running an account system; when a user initiates an account registration application through the account system, obtaining a current registration frequency of the device based on the device fingerprint ID; if the current registration frequency exceeds a preset range, intercepting the account registration application.

[0006] According to an embodiment of the present disclosure, it includes: whenever a user initiates an account registration application through the device, the transaction data of the account registration application is associated with and stored with the device fingerprint ID; based on the stored transaction data, the first registration frequency of the device corresponding to the device fingerprint ID initiating the account application within a preset time period is counted; based on the first registration frequency, the current registration frequency is obtained.

[0007] According to an embodiment of the present disclosure, when the user initiates an account registration application through the account system, obtaining the current registration frequency of the device based on the device fingerprint ID includes: obtaining a first registration frequency corresponding to the device fingerprint ID; based on the account registration application initiated this time, increasing the first registration frequency by 1 frequency to obtain the current registration frequency.

[0008] According to an embodiment of the present disclosure, the method also includes: comparing the current registration frequency and the preset frequency; when the current registration frequency is greater than the preset frequency, the current registration frequency exceeds the preset range; when the current registration frequency is less than or equal to the preset frequency, the current registration frequency satisfies the preset range.

[0009] According to an embodiment of the present disclosure, if the current registration frequency exceeds a preset range, intercepting the account registration application includes: intercepting transaction data of this account registration application; and prompting the user that there are risks due to frequent applications.

[0010] According to an embodiment of the present disclosure, it further includes: when the previous account registration application meets the preset range, submitting the transaction data of the account registration application to the account system to perform further registration process.

[0011] According to an embodiment of the present disclosure, it includes: a preset historical device information library, the historical device information library includes multiple historical device information groups, each historical device information group corresponds to multiple specified device information of a device running the account system, and each of the historical device information groups is associated with a corresponding device fingerprint ID; obtaining the device fingerprint ID of the device running the account system includes: obtaining multiple specified device information of the device; matching the multiple specified device information with the historical device information groups stored in the historical device database, and obtaining the device fingerprint ID corresponding to the historical device information group matching the multiple specified device information.

[0012] According to an embodiment of the present disclosure, it includes: when a user uses the device to run the account system for the first time, obtaining multiple specified device information of the device; based on the multiple device information, using a snowflake algorithm, generating a device fingerprint ID of the device.

[0013] On the other hand, the present disclosure provides an account risk prevention and control method based on device fingerprint, including: obtaining the device fingerprint ID of the device running the account system; when a user conducts a transaction through the account system, based on the device fingerprint ID, determining whether the device is a commonly used device or a historically used device of the user; if the device is not a commonly used device of the user, pushing a risk prompt to the user for intervention.

[0014] According to an embodiment of the present disclosure, whenever a user conducts a transaction through the account system, the transaction data is associated with the device fingerprint ID and stored; based on the stored transaction data, the number of transactions associated with the device fingerprint ID is counted; based on the number of transactions, it is determined whether the device corresponding to the device fingerprint ID is a commonly used device or a historically used device of the user.

[0015] According to an embodiment of the present disclosure, the determination of whether the device corresponding to the device fingerprint ID is a commonly used device or a historically used device of the user based on the number of transactions includes: when the number of transactions is greater than a first preset value, the device is a commonly used device of the user; when the number of transactions is less than the first preset value and greater than zero, the device is a historically used device of the user.

[0016] According to an embodiment of the present disclosure, if the device is not a commonly used device of the user, pushing a risk warning to the user for intervention includes: when the device is a device that the user has used historically, sending a verification code to the user for verification intervention; when the device is a device that the user has never used, intercepting the transaction and sending a risk warning SMS to the customer.

[0017] According to an embodiment of the present disclosure, it also includes: when the device is a common device of the user, submitting the transaction data of the transaction to the account system to perform further transaction activities.

[0018] According to an embodiment of the present disclosure, it includes: a preset historical device information library, the historical device information library includes multiple historical device information groups, each historical device information group corresponds to multiple specified device information of a device running the account system, and each of the historical device information groups is associated with a corresponding device fingerprint ID; obtaining the device fingerprint ID of the device running the account system includes: obtaining multiple specified device information of the device; matching the multiple specified device information with the historical device information groups stored in the historical device database, and obtaining the device fingerprint ID corresponding to the historical device information group matching the multiple specified device information.

[0019] According to an embodiment of the present disclosure, it includes: when a user uses the device to run the account system for the first time, obtaining multiple specified device information of the device; based on the multiple device information, using a snowflake algorithm, generating a device fingerprint ID of the device.

[0020] On the other hand, the present disclosure provides an account risk prevention and control device based on device fingerprint, including: a device ID acquisition module, used to obtain the device fingerprint ID of the device running the account system; a registration frequency acquisition module, used to obtain the current registration frequency of the device based on the device fingerprint ID when the user initiates an account registration application through the account system; a registration risk interception module, used to intercept the account registration application if the current registration frequency does not meet the preset frequency.

[0021] On the other hand, the present disclosure provides an account risk prevention and control device based on device fingerprint, including: a device ID acquisition module, used to obtain the device fingerprint ID of the device running the account system; a historical device determination module, used to determine whether the device is a commonly used device or a historically used device of the user based on the device fingerprint ID when the user conducts transactions through the account system; a transaction risk intervention module, used to push a risk prompt to the user for intervention if the device is not a commonly used device of the user.

[0022] Another aspect of the present disclosure provides a computer system, comprising: one or more processors; and a memory for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the method described in any one of the first aspects, and / or the one or more processors implement the method described in any one of the second aspects.

[0023] On the other hand, the present disclosure provides a computer-readable storage medium having executable instructions stored thereon, which, when executed by a processor, causes the processor to implement any of the methods described in the first aspect, and / or, when executed by a processor, causes the processor to implement any of the methods described in the second aspect.

[0024] The method provided by the present disclosure collects device information and generates a unique fingerprint ID for the device through device fingerprint technology, providing reliable information of the device dimension for bank account security risk control; it combines transaction data for feature processing, converts device information that is difficult to use and understand into risk features that are easy to understand and use in bank risk prevention and control. At the same time, it is applied to the judgment of in-process rules to effectively prevent the risk of false registration by frequently tampering with device information for account registration, and the risk of account theft by transferring large amounts of funds using uncommon devices. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] The above and other objects, features and advantages of the present disclosure will become more apparent through the following description of the embodiments of the present disclosure with reference to the accompanying drawings, in which:

[0026] Figure 1An exemplary system architecture of the device fingerprint-based account risk prevention and control method and apparatus disclosed in the present invention is schematically shown;

[0027] Figure 2 The flowchart of the account risk prevention and control method based on device fingerprint according to an embodiment of the present disclosure is schematically shown;

[0028] Figure 3 A specific implementation flow chart of the account risk prevention and control method based on device fingerprint according to an embodiment of the present disclosure applied to online banking or mobile banking is schematically shown;

[0029] Figure 4 The following schematically shows a flow chart of an account risk prevention and control method based on device fingerprint according to another embodiment of the present disclosure;

[0030] Figure 5 A specific implementation flow chart of an account risk prevention and control method based on device fingerprint according to another embodiment of the present disclosure applied to online banking or mobile banking is schematically shown;

[0031] Figure 6 The following schematically shows an account risk prevention and control device based on device fingerprint according to an embodiment of the present disclosure;

[0032] Figure 7 The following schematically shows an account risk prevention and control device based on device fingerprint according to another embodiment of the present disclosure;

[0033] Figure 8 A block diagram of a computer system 800 suitable for implementing a robot according to an embodiment of the present disclosure is schematically shown. DETAILED DESCRIPTION

[0034] Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present disclosure. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of the embodiments of the present disclosure. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of the concepts of the present disclosure.

[0035] The terms used herein are only for describing specific embodiments and are not intended to limit the present disclosure. The terms "comprise", "include", etc. used herein indicate the existence of the features, steps, operations and / or components, but do not exclude the existence or addition of one or more other features, steps, operations or components.

[0036] All terms (including technical and scientific terms) used herein have the meanings commonly understood by those skilled in the art, unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification, and should not be interpreted in an idealized or overly rigid manner.

[0037] In the case of using expressions such as "at least one of A, B, and C, etc.", it should generally be interpreted in accordance with the meaning of the expression generally understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.). In the case of using expressions such as "at least one of A, B, or C, etc.", it should generally be interpreted in accordance with the meaning of the expression generally understood by those skilled in the art (for example, "a system having at least one of A, B, or C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0038] The embodiments of the present disclosure provide a method and apparatus for account risk prevention and control based on device fingerprints. The method includes obtaining a device fingerprint ID and obtaining relevant risk identification information based on the device fingerprint ID. The device fingerprint ID is obtained by matching the device information with the information in a preset historical device database. Based on the device fingerprint ID, the current registration frequency of the device can be obtained and it can be determined whether the device is a commonly used device or a historically used device of the user, thereby determining whether there are problems of false registration and risk transactions of uncommon devices.

[0039] Figure 1 The exemplary system architecture 100 to which the device fingerprint-based account risk prevention and control method and apparatus can be applied according to an embodiment of the present disclosure is schematically shown. It should be noted that: Figure 1 What is shown is merely an example of a system architecture to which the embodiments of the present disclosure can be applied, in order to help those skilled in the art understand the technical content of the present disclosure, but it does not mean that the embodiments of the present disclosure cannot be used in other devices, systems, environments or scenarios.

[0040] like Figure 1 As shown, the system architecture 100 according to this embodiment may include terminal devices 101, 102, 103, a network 104 and a server 105. The network 104 is used to provide a medium for communication links between the terminal devices 101, 102, 103 and the server 105. The network 104 may include various connection types, such as wired and / or wireless communication links, etc.

[0041] Users can use terminal devices 101, 102, 103 to interact with server 105 through network 104 to receive or send messages, etc. Various communication client applications can be installed on terminal devices 101, 102, 103, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients and / or social platform software, etc. (only as examples).

[0042] The terminal devices 101 , 102 , and 103 may be various electronic devices having a display screen and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, and desktop computers.

[0043] The server 105 may be a server that provides various services, such as a background management server (only an example) that provides support for websites browsed by users using the terminal devices 101, 102, and 103. The background management server may analyze and process the received data such as user requests, and feed back the processing results (such as web pages, information, or data obtained or generated according to user requests) to the terminal device.

[0044] It should be noted that the account risk prevention and control method based on device fingerprint provided in the embodiment of the present disclosure can generally be executed by the server 105. Accordingly, the account risk prevention and control device based on device fingerprint provided in the embodiment of the present disclosure can generally be set in the server 105. The account risk prevention and control method based on device fingerprint provided in the embodiment of the present disclosure can also be executed by a server or server cluster that is different from the server 105 and can communicate with the terminal devices 101, 102, 103 and / or the server 105. Correspondingly, the account risk prevention and control device based on device fingerprint provided in the embodiment of the present disclosure can also be set in a server or server cluster that is different from the server 105 and can communicate with the terminal devices 101, 102, 103 and / or the server 105. Alternatively, the account risk prevention and control method based on device fingerprint provided in the embodiment of the present disclosure can also be executed by the terminal devices 101, 102, or 103, or can also be executed by other terminal devices different from the terminal devices 101, 102, or 103. Accordingly, the device fingerprint-based account risk prevention and control apparatus provided in the embodiments of the present disclosure may also be disposed in the terminal device 101 , 102 , or 103 , or in other terminal devices different from the terminal device 101 , 102 , or 103 .

[0045] For example, the current transaction information may be originally stored in any one of the terminal devices 101, 102, or 103 (for example, the terminal device 101, but not limited thereto), or stored in an external storage device and may be imported into the terminal device 101. Then, the terminal device 101 may locally execute the account risk prevention and control method based on device fingerprint provided in the embodiment of the present disclosure, or send the current transaction information to other terminal devices, servers, or server clusters, and the other terminal devices, servers, or server clusters that receive the current transaction information may execute the account risk prevention and control method based on device fingerprint provided in the embodiment of the present disclosure.

[0046] It should be understood that Figure 1 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to implementation requirements.

[0047] Figure 2 The flowchart of the account risk prevention and control method based on device fingerprint according to an embodiment of the present disclosure is schematically shown.

[0048] like Figure 2 As shown, the method includes operations S210 to S230.

[0049] In operation S210 , a device fingerprint ID of a device running an account system is obtained.

[0050] In operation S220, when the user initiates an account registration application through the account system, the current registration frequency of the device is obtained based on the device fingerprint ID.

[0051] In operation S230, if the current registration frequency exceeds a preset range, the account registration application is intercepted.

[0052] Taking the online banking page and mobile banking APP as an example, the device fingerprint SDK can be used to collect device information after the online banking page and mobile banking APP are opened, and then the data is uploaded to the device fingerprint server of the risk control system. The server calculates and generates a globally unique device fingerprint ID and returns it to the online banking and mobile banking systems to indicate the uniqueness of the device; each registration transaction is bound to the device fingerprint ID at the time of the transaction, and the registration frequency is compiled and counted; when the registration frequency is abnormal, it can be determined that the device is at risk of false registration and should be intercepted and processed.

[0053] Specifically, in the embodiment of the present disclosure, a historical device information library should be preset, and the historical device information library includes multiple historical device information groups, each of which corresponds to multiple specified device information of a device running the account system, and each of the historical device information groups is associated with a corresponding device fingerprint ID. Based on the historical device information library, the corresponding device fingerprint ID can be obtained by matching each historical device information group.

[0054] Based on the historical device information database, obtaining the device fingerprint ID of the device running the account system in operation S210 includes operations S211 to S212.

[0055] In operation S211, a plurality of designated device information of the device is acquired.

[0056] In operation S212, the plurality of designated device information are matched with the historical device information group stored in the historical device database to obtain a device fingerprint ID corresponding to the historical device information group matching the plurality of designated device information.

[0057] In the disclosed embodiment, considering that the method of falsely registering an account based on simple information such as ID number, IP, MAC, etc. is easy to be cracked, a unique device fingerprint ID is used to prove the uniqueness of the device and perform effective registration frequency statistics based on it. The generation of the device fingerprint ID includes operations S201 to S202.

[0058] In operation S201 , when a user uses the device to run the account system for the first time, a plurality of designated device information of the device is obtained.

[0059] In operation S202, a device fingerprint ID of the device is generated based on the plurality of device information using a snowflake algorithm.

[0060] The multiple specified device information may include, for example, device type, Android version, device model, product code, brand, device serial number, ROM number, HOST, device name, ROM label, IMSI, IMEI, mobile phone number, voicemail number, SIM card serial number, country code, operator, mobile phone format, network format, base station information, device software version number, IP address, Macdizhi, wireless network name, wireless BSSID, gateway address, proxy configuration, DNS address, VPN IP address, VPN subnet mask, network type, current time, standby time, running time, whether ROOT, etc. The multiple specified device information may be encrypted using the SM4 national encryption algorithm, the link may be encrypted using HTTPS, the device information may be reported to the server, and the device fingerprint ID may be generated using the snowflake algorithm.

[0061] The collected data can be flexibly adjusted according to the risk feature calculation needs, including but not limited to the following data. However, in order to protect customer privacy, private data such as user contacts, call records, SMS records, user in-app business data, etc. will not be collected.

[0062] In the embodiment of the present disclosure, before implementing the method, the method further includes S203 to S204.

[0063] In operation S203, whenever a user initiates an account registration application through the device, the transaction data of the account registration application is associated with the device fingerprint ID and stored.

[0064] In operation S204, based on the stored transaction data, the first registration frequency of the device corresponding to the device fingerprint ID initiating the account application within a preset time period is counted.

[0065] In operation S220, when the user initiates an account registration application through the account system, the first registration frequency of the device is obtained based on the device fingerprint ID, and the current registration frequency is obtained based on the first registration frequency. Specifically, operations S221 to S222 are included.

[0066] In operation S221, a first registration frequency corresponding to the device fingerprint ID is obtained.

[0067] In operation S222, based on the account registration application initiated this time, the first registration frequency is increased by 1 frequency to obtain the current registration frequency.

[0068] Optionally, the first registration frequency may be the frequency of registration applications made within N hours closest to the current operation, and the current registration frequency=the first registration frequency+1.

[0069] After obtaining the current registration frequency, the method further includes: operations S223 to S225.

[0070] In operation S223, the current registration frequency is compared with the preset frequency.

[0071] In operation S224, when the current registration frequency is greater than the preset frequency, the current registration frequency exceeds the preset range.

[0072] In operation S225, when the current registration frequency is less than or equal to the preset frequency, the current registration frequency satisfies the preset range.

[0073] In the disclosed embodiment, if the current registration frequency is higher than the preset frequency, it means that an abnormal number of registration applications have been made on the current device within the preset time period, and there is a risk of false applications.

[0074] According to operation S230, if the current registration frequency exceeds a preset range, intercepting the account registration application includes operations S231 to S232.

[0075] In operation S231, transaction data of this account registration application is intercepted.

[0076] In operation S232, the user is prompted that frequent applications may lead to risks.

[0077] The method further includes operation S226:

[0078] In operation S226, when the previous account registration application meets the preset range, the transaction data of the account registration application is submitted to the account system for further registration process.

[0079] According to operation S226, the transaction information and the device fingerprint ID are sent to the core system, and the core system transmits the historical transaction information to the stream data platform through a bypass to register the account.

[0080] Figure 3 The specific implementation method of applying the device fingerprint-based account risk prevention and control method provided by the embodiment of the present disclosure to online banking or mobile banking is schematically shown.

[0081] like Figure 3 As shown in the figure, the globally unique ID of the device is obtained through the device fingerprint technology, and the risk of false registration in online banking and mobile banking is identified by processing the characteristics of historical transactions of registered accounts and judging the rules of real-time transactions. The whole process includes three parts: device fingerprint collection and calculation, frequency feature processing of accounts on the same device, and rule decision-making for false registration.

[0082] Device fingerprint collection and calculation: This part collects device information through the device fingerprint SDK when online banking and mobile banking are started, calculates and generates a globally unique device fingerprint ID on the device fingerprint server, and returns it to online banking and mobile banking.

[0083] Frequency feature processing of account registration on the same device: This part contains account registration history information, which is used to count the number of registration applications for the same device fingerprint ID through online banking and mobile banking channels.

[0084] In-process rule decision-making for false registration: This part makes in-process rule decisions for the registration application transaction based on the frequency characteristics of the same device registration account, identifies false registration risks, and intercepts them.

[0085] The logic of the rules in the process is as follows:

[0086] If the number of transactions N+1 applied for by registering an account with the same device fingerprint ID within X hours is greater than M, the transaction will be blocked.

[0087] Figure 4 The following schematically shows a flow chart of an account risk prevention and control method based on device fingerprint according to another embodiment of the present disclosure.

[0088] like Figure 4 As shown, another embodiment of the present disclosure provides an account risk prevention and control method based on device fingerprint, including operations S410 to S430.

[0089] In operation S410 , a device fingerprint ID of a device running an account system is obtained.

[0090] In operation S420, when the user conducts a transaction through the account system, it is determined based on the device fingerprint ID whether the device is a common device or a historically used device of the user.

[0091] In operation S430, if the device is not a common device of the user, a risk prompt is pushed to the user for intervention.

[0092] In the embodiment of the present disclosure, the method further includes operations S401-402.

[0093] In operation S401, each time a user conducts a transaction through the account system, the transaction data is associated with the device fingerprint ID and stored.

[0094] In operation S402, based on the stored transaction data, the number of transactions associated with the device fingerprint ID is counted.

[0095] In operation S420, the number of transactions performed by the user using the device is obtained based on the device fingerprint ID, and it is determined whether the device corresponding to the device fingerprint ID is a commonly used device or a device that has been used in the past by the user. Specifically, the determination method includes operations S421 to S422.

[0096] In operation S421, when the number of transactions is greater than a first preset value, the device is a frequently used device of the user.

[0097] In operation S422, when the number of transactions is less than a first preset value and greater than zero, the device is a device that has been used by the user in the past.

[0098] It is understandable that if the number of transactions is zero, it means that the user is using the device to conduct a transaction for the first time.

[0099] According to operation S430, if the device is not a commonly used device of the user, that is, the device is a device that has been used in the past or is used for the first time, a risk prompt is pushed to the user for intervention, including operations S431 to S432.

[0100] In operation S431, when the device is a device that the user has used before, a verification code is sent to the user for verification intervention.

[0101] In operation S432, when the device is a device that the user has never used, the transaction is intercepted and a risk warning SMS is sent to the customer.

[0102] The method further includes operation S433:

[0103] In operation S433, when the device is a common device of the user, the transaction data of the transaction is submitted to the account system for further transaction activities.

[0104] In the embodiment of the present disclosure, Figure 2 The method shown is the same as that shown in the figure. A historical device information library should be preset, and the historical device information library includes multiple historical device information groups. Each historical device information group corresponds to multiple specified device information of a device running the account system. Each of the historical device information groups is associated with a corresponding device fingerprint ID. Based on the historical device information library, the corresponding device fingerprint ID can be obtained by matching each historical device information group.

[0105] Based on the historical device information library, obtaining the device fingerprint ID of the device running the account system in operation S410 includes operations S411 to S412.

[0106] In operation S411, a plurality of designated device information of the device is acquired.

[0107] In operation S412, the plurality of designated device information are matched with the historical device information group stored in the historical device database to obtain a device fingerprint ID corresponding to the historical device information group matching the plurality of designated device information.

[0108] Based on the method provided in the embodiment of the present disclosure, by associating the unique identification information device fingerprint ID with the number of transactions of the device, the bank account security risk control provides reliable information in the device dimension, making it difficult for criminals to forge relevant data, thereby reducing the risk of account theft caused by forged user data.

[0109] Figure 5 The specific implementation flow chart of the account risk prevention and control method based on device fingerprint according to another embodiment of the present disclosure applied to online banking or mobile banking is schematically shown.

[0110] like Figure 5As shown, the globally unique ID of the device is obtained through the device fingerprint technology, and the features of the devices commonly used for transfer and remittance by the customer and the devices that have appeared in the past are processed, and real-time transaction rule judgment is performed in the process to identify the risk of account theft in online banking and mobile banking. The whole process includes three parts: device fingerprint collection and calculation, feature processing of customers' commonly used devices and historical devices, and rule decision-making in the process of account theft.

[0111] Device fingerprint collection and calculation: This part collects device information through the device fingerprint SDK when online banking and mobile banking are started, calculates and generates a globally unique device fingerprint ID on the device fingerprint server, and returns it to online banking and mobile banking.

[0112] Processing of features of customers' commonly used devices and historically appeared devices: This section contains historical transaction data of transfer and remittance, which is used to count customers' commonly used devices and historically appeared devices.

[0113] Decision-making on rules during account theft: This part makes decision-making on rules during the current transfer and remittance transaction based on the common processing equipment and historical features, identifies the risk of account theft, and conducts corresponding intervention during the process.

[0114] The logic of the rules in the process is as follows:

[0115] If the device used by the customer to transfer money is not the customer's usual device but has appeared in the past, the SMS verification code will be used for intervention. If the device used by the customer to transfer money is not the customer's usual device and has not appeared in the past, the transaction will be intercepted and a security reminder SMS will be sent to the customer.

[0116] Figure 6 The invention schematically shows an account risk prevention and control device based on device fingerprint according to an embodiment of the present disclosure.

[0117] like Figure 6 As shown, the present disclosure provides an account risk prevention and control device 600 based on device fingerprint, including: a device ID acquisition module 610, a registration frequency acquisition module 620, and a registration risk interception module 630.

[0118] The device ID acquisition module 610 is used to acquire the device fingerprint ID of the device running the account system.

[0119] The registration frequency acquisition module 620 is used to acquire the current registration frequency of the device based on the device fingerprint ID when the user initiates an account registration application through the account system.

[0120] The registration risk interception module 630 is used to intercept the account registration application if the current registration frequency does not meet the preset frequency.

[0121] It should be noted that the account risk prevention and control device 600 based on device fingerprint in the embodiment of the present disclosure is partially different from the embodiment of the present disclosure. Figure 2 , 3 The account risk prevention and control method based on device fingerprint shown in the figure is corresponding, and the description of the account risk prevention and control device based on device fingerprint is specifically referred to as Figure 2 , 3 The method part of the account risk prevention and control method based on device fingerprint is not repeated here.

[0122] Figure 7 An account risk prevention and control apparatus based on device fingerprint according to another embodiment of the present disclosure is schematically illustrated.

[0123] like Figure 7 As shown, another embodiment of the present disclosure provides an account risk prevention and control device 700 based on device fingerprint, including: a device ID acquisition module 710, a historical device determination module 720, and a transaction risk intervention module 730.

[0124] The device ID acquisition module 710 is used to acquire the device fingerprint ID of the device running the account system.

[0125] The historical device determination module 720 is used to determine whether the device is a common device or a historically used device of the user based on the device fingerprint ID when the user conducts a transaction through the account system.

[0126] The transaction risk intervention module 730 is used to push a risk prompt to the user for intervention if the device is not a common device of the user.

[0127] It should be noted that the account risk prevention and control device 600 based on device fingerprint in the embodiment of the present disclosure is partially different from the embodiment of the present disclosure. Figure 4 , 5 The account risk prevention and control method based on device fingerprint shown in the figure is corresponding, and the description of the account risk prevention and control device based on device fingerprint is specifically referred to as Figure 4 , 5 The method part of the account risk prevention and control method based on device fingerprint is not repeated here.

[0128] According to the embodiments of the present invention, any one or more of the modules, submodules, units, and subunits, or at least part of the functions of any one of them can be implemented in one module. According to the embodiments of the present invention, any one or more of the modules, submodules, units, and subunits can be split into multiple modules for implementation. According to the embodiments of the present invention, any one or more of the modules, submodules, units, and subunits can be at least partially implemented as hardware circuits, such as field programmable gate arrays (FPGAs), programmable logic arrays (PLAs), systems on chips, systems on substrates, systems on packages, application specific integrated circuits (ASICs), or can be implemented by hardware or firmware in any other reasonable way of integrating or packaging the circuit, or implemented in any one of the three implementation methods of software, hardware, and firmware, or in any appropriate combination of any of them. Alternatively, according to the embodiments of the present invention, one or more of the modules, submodules, units, and subunits can be at least partially implemented as computer program modules, and when the computer program modules are run, the corresponding functions can be performed.

[0129] For example, any of the device ID acquisition module 610, the registration frequency acquisition module 620, the registration risk interception module 630, and even the device ID acquisition module 710, the historical device determination module 720, and the transaction risk intervention module 730 can be combined in one module / unit / sub-unit for implementation, or any of the modules / units / sub-units can be split into multiple modules / units / sub-units. Alternatively, at least part of the functions of one or more of these modules / units / sub-units can be combined with at least part of the functions of other modules / units / sub-units and implemented in one module / unit / sub-unit. According to an embodiment of the present disclosure, at least one of the device ID acquisition module 610, the registration frequency acquisition module 620, the registration risk interception module 630, and even the device ID acquisition module 710, the historical device determination module 720, and the transaction risk intervention module 730 can be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a system on a package, an application-specific integrated circuit (ASIC), or can be implemented by hardware or firmware such as any other reasonable way of integrating or packaging the circuit, or implemented in any one of the three implementation methods of software, hardware, and firmware, or in any appropriate combination of any of them. Alternatively, at least one of the device ID acquisition module 610, the registration frequency acquisition module 620, the registration risk interception module 630, and even the device ID acquisition module 710, the historical device determination module 720, and the transaction risk intervention module 730 can be at least partially implemented as a computer program module, and when the computer program module is run, the corresponding function can be executed.

[0130] Figure 8A block diagram of a computer system suitable for implementing the method described above according to an embodiment of the present disclosure is schematically shown. Figure 8 The computer system shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0131] like Figure 8 As shown, the computer system 800 according to the embodiment of the present disclosure includes a processor 801, which can perform various appropriate actions and processes according to the program stored in the read-only memory (ROM) 802 or the program loaded from the storage part 808 to the random access memory (RAM) 803. The processor 801 may include, for example, a general-purpose microprocessor (such as a CPU), an instruction set processor and / or a related chipset and / or a special-purpose microprocessor (for example, an application-specific integrated circuit (ASIC)), etc. The processor 801 may also include an onboard memory for caching purposes. The processor 801 may include a single processing unit or multiple processing units for performing different actions of the method flow according to the embodiment of the present disclosure.

[0132] In RAM 803, various programs and data required for the operation of system 800 are stored. Processor 801, ROM 802 and RAM 803 are connected to each other through bus 804. Processor 801 performs various operations of the method flow according to the embodiment of the present disclosure by executing the program in ROM 802 and / or RAM 803. It should be noted that the program can also be stored in one or more memories other than ROM 802 and RAM 803. Processor 801 can also perform various operations of the method flow according to the embodiment of the present disclosure by executing the program stored in the one or more memories.

[0133] According to an embodiment of the present disclosure, the system 800 may further include an input / output (I / O) interface 805, which is also connected to the bus 804. The system 800 may further include one or more of the following components connected to the I / O interface 805: an input section 806 including a keyboard, a mouse, etc.; an output section 807 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 808 including a hard disk, etc.; and a communication section 809 including a network interface card such as a LAN card, a modem, etc. The communication section 809 performs communication processing via a network such as the Internet. A drive 810 is also connected to the I / O interface 805 as needed. A removable medium 811, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 810 as needed, so that a computer program read therefrom is installed into the storage section 808 as needed.

[0134] According to an embodiment of the present disclosure, the method flow according to an embodiment of the present disclosure can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a computer-readable storage medium, and the computer program contains a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 809, and / or installed from the removable medium 811. When the computer program is executed by the processor 801, the above-mentioned functions defined in the system of the embodiment of the present disclosure are executed. According to an embodiment of the present disclosure, the system, equipment, device, module, unit, etc. described above can be implemented by a computer program module.

[0135] The present disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or may exist independently without being assembled into the device / apparatus / system. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed, the method according to the embodiment of the present disclosure is implemented.

[0136] According to an embodiment of the present disclosure, the computer-readable storage medium may be a non-volatile computer-readable storage medium. For example, it may include, but is not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in combination with an instruction execution system, apparatus, or device.

[0137] For example, according to an embodiment of the present disclosure, the computer-readable storage medium may include the ROM 802 and / or the RAM 803 described above and / or one or more memories other than the ROM 802 and the RAM 803 .

[0138] The flow charts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0139] It will be appreciated by those skilled in the art that the features described in the various embodiments and / or claims of the present disclosure may be combined and / or combined in a variety of ways, even if such combinations and / or combinations are not explicitly described in the present disclosure. In particular, the features described in the various embodiments and / or claims of the present disclosure may be combined and / or combined in a variety of ways without departing from the spirit and teachings of the present disclosure. All of these combinations and / or combinations fall within the scope of the present disclosure.

[0140] The embodiments of the present disclosure are described above. However, these embodiments are only for illustrative purposes and are not intended to limit the scope of the present disclosure. Although the embodiments are described above separately, this does not mean that the measures in the various embodiments cannot be used in combination to advantage. The scope of the present disclosure is defined by the attached claims and their equivalents. Without departing from the scope of the present disclosure, those skilled in the art may make a variety of substitutions and modifications, which should all fall within the scope of the present disclosure.

Claims

1. An account risk prevention and control method based on device fingerprint, include: Get the device fingerprint ID of the device running the account system; When a user initiates an account registration application through the account system, the current registration frequency of the device is obtained based on the device fingerprint ID; If the current registration frequency exceeds a preset range, the account registration application is intercepted. Wherein, whenever a user initiates an account registration application through the device, the transaction data of the account registration application is associated with the device fingerprint ID and stored; Based on the stored transaction data, counting the first registration frequency of the account application initiated by the device corresponding to the device fingerprint ID within a preset time period; Based on the first registration frequency, the current registration frequency is obtained.

2. The method according to claim 1, wherein when the user initiates an account registration application through the account system, the current registration frequency of the device is obtained based on the device fingerprint ID. include: Obtaining a first registration frequency corresponding to the device fingerprint ID; Based on the account registration application initiated this time, the first registration frequency is increased by 1 frequency to obtain the current registration frequency.

3. The method according to claim 1, further comprising: include: Comparing the current registration frequency with a preset frequency; When the current registration frequency is greater than the preset frequency, the current registration frequency exceeds the preset range; When the current registration frequency is less than or equal to the preset frequency, the current registration frequency satisfies the preset range.

4. The method according to claim 1, wherein if the current registration frequency exceeds a preset range, the account registration application is intercepted include: Intercept the transaction data of this account registration application; Remind users that frequent applications may involve risks.

5. The method according to claim 1, further comprising: include: When the previous account registration application meets the preset range, the transaction data of the account registration application is submitted to the account system for further registration process.

6. The method according to claim 1, include: A historical device information database is preset, wherein the historical device information database includes a plurality of historical device information groups, each of which corresponds to a plurality of specified device information of a device running the account system, and each of the historical device information groups is associated with a corresponding device fingerprint ID; The step of obtaining the device fingerprint ID of the device running the account system includes: Obtaining multiple pieces of specified device information of the device; The plurality of designated device information are matched with the historical device information groups stored in the historical device database to obtain device fingerprint IDs corresponding to the historical device information groups matching the plurality of designated device information.

7. The method according to claim 1, include: When the user uses the device to run the account system for the first time, obtaining a plurality of designated device information of the device; Based on the multiple device information, a device fingerprint ID of the device is generated using a snowflake algorithm.

8. An account risk prevention and control method based on device fingerprint, include: Get the device fingerprint ID of the device running the account system; When a user conducts a transaction through the account system, based on the device fingerprint ID, it is determined whether the device is a commonly used device or a device that has been used in the past by the user; If the device is not a common device of the user, a risk reminder is pushed to the user for intervention. wherein, whenever a user conducts a transaction through the account system, the transaction data is associated with the device fingerprint ID and stored; Based on the stored transaction data, counting the number of transactions associated with the device fingerprint ID; Based on the number of transactions, determine whether the device corresponding to the device fingerprint ID is a commonly used device or a historically used device of the user.

9. The method according to claim 8, wherein based on the number of transactions, determining whether the device corresponding to the device fingerprint ID is a commonly used device or a historically used device of the user include: When the number of transactions is greater than a first preset value, the device is a commonly used device of the user; When the number of transactions is less than a first preset value and greater than zero, the device is a device that has been used by the user in the past.

10. The method according to claim 8, wherein if the device is not a common device of the user, a risk reminder is pushed to the user for intervention include: When the device is a device that the user has used before, sending a verification code to the user for verification intervention; When the device is a device that the user has never used, the transaction is intercepted and a risk warning SMS is sent to the customer.

11. The method according to claim 8, further comprising: include: When the device is a common device of the user, the transaction data of the transaction is submitted to the account system for further transaction activities.

12. The method according to claim 8, include: A historical device information database is preset, wherein the historical device information database includes a plurality of historical device information groups, each of which corresponds to a plurality of specified device information of a device running the account system, and each of the historical device information groups is associated with a corresponding device fingerprint ID; The step of obtaining the device fingerprint ID of the device running the account system includes: Obtaining multiple pieces of specified device information of the device; The plurality of designated device information are matched with the historical device information groups stored in the historical device database to obtain device fingerprint IDs corresponding to the historical device information groups matching the plurality of designated device information.

13. The method according to claim 8, include: When the user uses the device to run the account system for the first time, obtaining a plurality of designated device information of the device; Based on the multiple device information, a device fingerprint ID of the device is generated using a snowflake algorithm.

14. An account risk prevention and control device based on device fingerprint, include: A device ID acquisition module, used to obtain the device fingerprint ID of the device running the account system; A registration frequency acquisition module, used to acquire the current registration frequency of the device based on the device fingerprint ID when the user initiates an account registration application through the account system; A registration risk interception module is used to intercept the account registration application if the current registration frequency does not meet the preset frequency, Wherein, whenever a user initiates an account registration application through the device, the transaction data of the account registration application is associated with the device fingerprint ID and stored; Based on the stored transaction data, counting the first registration frequency of the account application initiated by the device corresponding to the device fingerprint ID within a preset time period; Based on the first registration frequency, the current registration frequency is obtained.

15. An account risk prevention and control device based on device fingerprint, include: A device ID acquisition module, used to obtain the device fingerprint ID of the device running the account system; A historical device determination module, used to determine whether the device is a common device or a historically used device of the user based on the device fingerprint ID when the user conducts a transaction through the account system; The transaction risk intervention module is used to push a risk reminder to the user for intervention if the device is not a common device of the user. Wherein, whenever a user initiates an account registration application through the device, the transaction data of the account registration application is associated with the device fingerprint ID and stored; Based on the stored transaction data, counting the first registration frequency of the account application initiated by the device corresponding to the device fingerprint ID within a preset time period; Based on the first registration frequency, the current registration frequency is obtained.

16. A computer system, include: one or more processors; a memory for storing one or more programs, Wherein, when the one or more programs are executed by the one or more processors, the one or more processors implement the method described in any one of claims 1 to 7, and / or the one or more processors implement the method described in any one of claims 8 to 13.

17. A computer-readable storage medium having executable instructions stored thereon, which, when executed by a processor, causes the processor to implement the method described in any one of claims 1 to 7, and / or, when executed by a processor, causes the processor to implement the method described in any one of claims 8 to 13.

Images