Bank debit card transaction risk control method and device based on dual authentication

Abstract

The present invention discloses a bank debit card transaction risk control method and device based on double authentication, which relates to the field of artificial intelligence. The method comprises: receiving transaction information sent by a transaction channel end, determining a first basic authentication method according to the transaction information; receiving the first authentication information sent by the transaction channel end, and performing a first basic authentication on the customer identity; after the first basic authentication is successful, based on a transaction risk control model, determining the risk level of the transaction according to the transaction information, performing a second risk authentication according to the risk level and the transaction information, and returning the second risk authentication method to the transaction channel end; performing a second risk authentication on the customer identity based on the second authentication information sent by the transaction channel end; and the transaction channel end performs subsequent corresponding processing of the transaction according to the second risk authentication result. The present invention can improve the bank system's ability to identify transaction risks and ensure the authenticity of customer transactions.

Description

Technical Field

[0001] The present invention relates to the field of artificial intelligence technology, and in particular to a bank debit card transaction risk control method and device based on double authentication. Background Art

[0002] This section is intended to provide a background or context to the embodiments of the invention recited in the claims. No admission is made that the description herein is prior art by inclusion in this section.

[0003] With the development of high-tech technologies such as facial recognition, fingerprint recognition, iris authentication, and the issuance of digital bank cards, how to ensure the authenticity of customer transactions and reduce the risk of transaction fraud has become increasingly important for banking business.

[0004] At present, the banking system lacks a unified identity authentication platform for transactions initiated by customers in various channels. Each channel only defines the way to verify the identity of customers according to its own transaction rules, and lacks a flexible and parameterizable authentication method. The channel only uses the first basic authentication result to identify the identity of the customer, which is not conducive to the development of banking business and is prone to fraud, customer complaints, and poor customer experience. Summary of the invention

[0005] The embodiment of the present invention provides a bank debit card transaction risk control method based on dual authentication, which is used to solve the problem that each channel end only verifies the customer identity according to its own transaction rule definition, lacks a flexible and parameterizable authentication method; single identity authentication is not conducive to the development of banking business, easily leads to fraud, causes customer complaints, and affects the customer experience. The method includes:

[0006] receiving transaction information sent by the transaction channel end, determining a first basic authentication method according to the transaction information, and returning the first basic authentication method to the transaction channel end;

[0007] receiving the first authentication information sent by the transaction channel end, performing a first basic authentication on the customer identity based on the first authentication information, and feeding back the first basic authentication result to the transaction channel end; wherein the first authentication information is input by the customer to the transaction channel end based on the first basic authentication method;

[0008] After the first basic authentication is successful, based on the transaction risk control model, the risk level of the transaction is determined according to the transaction information, a second risk authentication method is determined according to the risk level and the transaction information, and the second risk authentication method is returned to the transaction channel end;

[0009] Receive the second-level authentication information sent by the transaction channel end, perform a second-level risk authentication on the customer identity based on the second-level authentication information, and feed back the second-level risk authentication result to the transaction channel end, which then performs subsequent corresponding processing of the transaction based on the second-level risk authentication result; wherein the second-level authentication information is input by the customer into the transaction channel end based on the second-level risk authentication method.

[0010] The embodiment of the present invention also provides a bank debit card transaction risk control device based on dual authentication, which is used to solve the problem that each channel end only verifies the customer identity according to its own transaction rule definition, lacks a flexible and parameterizable authentication method; single identity authentication is not conducive to the development of banking business, easily leads to fraud, leads to customer complaints, and affects the technical problem of customer experience. The device includes:

[0011] A first basic authentication method determination module, configured to receive transaction information sent by a transaction channel end, determine a first basic authentication method according to the transaction information, and return the first basic authentication method to the transaction channel end;

[0012] A first-level basic authentication module is used to receive the first-level authentication information sent by the transaction channel end, perform the first-level basic authentication on the customer identity based on the first-level authentication information, and feed back the first-level basic authentication result to the transaction channel end; wherein the first-level authentication information is input by the customer to the transaction channel end based on the first-level basic authentication method;

[0013] A second basic authentication method determination module is used to determine the risk level of the transaction according to the transaction information based on the transaction risk control model after the first basic authentication is successful, determine the second risk authentication method according to the risk level and the transaction information, and return the second risk authentication method to the transaction channel end;

[0014] The second basic authentication module is used to receive the second authentication information sent by the transaction channel end, perform a second risk authentication on the customer identity based on the second authentication information, and feed back the second risk authentication result to the transaction channel end, and the transaction channel end performs subsequent corresponding processing of the transaction based on the second risk authentication result; wherein, the second authentication information is input by the customer into the transaction channel end based on the second risk authentication method.

[0015] The embodiment of the present invention provides a bank debit card transaction risk control method based on dual authentication, which is used to solve the problem that each channel end only verifies the customer identity according to its own transaction rule definition, lacks a flexible and parameterizable authentication method; single identity authentication is not conducive to the development of banking business, easily leads to fraud, causes customer complaints, and affects the customer experience. The method includes:

[0016] The transaction channel receives the transaction information submitted by the customer and sends the transaction information to the unified identity authentication platform;

[0017] The unified identity authentication platform receives the transaction information sent by the transaction channel end, determines the first basic authentication method according to the transaction information, and returns the first basic authentication method to the transaction channel end;

[0018] The transaction channel receives the first authentication information input by the customer based on the first basic authentication method, and sends the first authentication information to the unified identity authentication platform;

[0019] The unified identity authentication platform receives the first authentication information sent by the transaction channel end, performs a first basic authentication on the customer identity based on the first authentication information, and feeds back the first basic authentication result to the transaction channel end;

[0020] After the first basic authentication is successful, the unified identity authentication platform determines the risk level of the transaction according to the transaction information based on the transaction risk control model, determines the second risk authentication method according to the risk level and the transaction information, and returns the second risk authentication method to the transaction channel end;

[0021] The transaction channel receives the second authentication information input by the customer based on the second risk authentication method, and sends the second authentication information to the unified identity authentication platform;

[0022] The unified identity authentication platform receives the second authentication information sent by the transaction channel end, performs a second risk authentication on the customer identity based on the second authentication information, and feeds back the second risk authentication result to the transaction channel end;

[0023] The transaction channel will carry out subsequent corresponding processing of the transaction based on the results of the second risk authentication.

[0024] The embodiment of the present invention provides a bank debit card transaction risk control system based on dual authentication, which is used to solve the technical problems that each channel end only verifies the customer identity according to its own transaction rule definition, lacks a flexible and parameterizable authentication method; single identity authentication is not conducive to the development of banking business, easily leads to fraud, causes customer complaints, and affects customer experience. The system includes: a transaction channel end and a unified identity authentication platform, which is used to implement the above-mentioned bank debit card transaction risk control method based on dual authentication.

[0025] An embodiment of the present invention also provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned bank debit card transaction risk control method based on dual authentication when executing the computer program.

[0026] An embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the bank debit card transaction risk control method based on dual authentication is implemented.

[0027] An embodiment of the present invention further provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the bank debit card transaction risk control method based on dual authentication is implemented.

[0028] In the embodiment of the present invention, compared with the technical solution in the prior art in which each channel end only verifies the customer identity according to its own transaction rule definition and only uses a single basic identity authentication, the present invention utilizes a unified identity authentication platform to authenticate the user identity. In addition to performing a single basic identity authentication on the customer identity, after the single basic identity authentication is passed, the risk level of the transaction is determined based on the transaction information based on the transaction risk control model, and a second risk authentication is performed based on the risk level and the transaction information. After two identity authentications, the probability of customers being mistakenly identified as fraudulent can be reduced, thereby improving customer experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the prior art descriptions. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. In the drawings:

[0030] Figure 1 The following is a flow chart of a bank debit card transaction risk control method based on dual authentication in an embodiment of the present invention (from the perspective of a unified identity authentication platform);

[0031] Figure 2 A schematic diagram of a frequent data set search process in an embodiment of the present invention;

[0032] Figure 3 It is a structural block diagram of a bank debit card transaction risk control device based on dual authentication in an embodiment of the present invention (i.e., a unified identity authentication platform);

[0033] Figure 4 The present invention is a flowchart of a method for implementing dual authentication in a bank debit card transaction risk control system based on dual authentication in an embodiment of the present invention. DETAILED DESCRIPTION

[0034] To make the purpose, technical solution and advantages of the embodiments of the present invention more clear, the embodiments of the present invention are further described in detail below in conjunction with the accompanying drawings. Here, the exemplary embodiments of the present invention and their descriptions are used to explain the present invention, but are not intended to limit the present invention.

[0035] Figure 1 Flow chart of the bank debit card transaction risk control method based on dual authentication in an embodiment of the present invention (from the perspective of a unified identity authentication platform); applied to a unified identity authentication platform, such as Figure 1 As shown, the method includes:

[0036] Step 101: receiving transaction information sent by a transaction channel end, determining a first basic authentication method according to the transaction information, and returning the first basic authentication method to the transaction channel end;

[0037] Step 102: receiving the first authentication information sent by the transaction channel end, performing a first basic authentication on the customer identity based on the first authentication information, and feeding back the first basic authentication result to the transaction channel end; wherein the first authentication information is input by the customer to the transaction channel end based on the first basic authentication method;

[0038] Step 103: After the first basic authentication is successful, based on the transaction risk control model, determine the risk level of the transaction according to the transaction information, determine the second risk authentication method according to the risk level and the transaction information, and return the second risk authentication method to the transaction channel end;

[0039] Step 104: Receive the second-level authentication information sent by the transaction channel end, perform a second-level risk authentication on the customer identity based on the second-level authentication information, and feed back the second-level risk authentication result to the transaction channel end, and the transaction channel end performs subsequent corresponding processing of the transaction based on the second-level risk authentication result; wherein, the second-level authentication information is input by the customer into the transaction channel end based on the second-level risk authentication method.

[0040] In an embodiment of the present invention, determining the first basic authentication method according to the transaction information includes:

[0041] Determine transaction channels and business scenarios based on the transaction information;

[0042] The first level of basic authentication method is determined based on the transaction channel and business scenario.

[0043] Specifically, the identity authentication of ATM, POS, mobile banking, online banking and other channels is connected to the unified identity authentication platform, and the authentication method of the first basic authentication is set. According to the transaction channel and business scenario, a required verification method is set for each transaction, which can be mobile banking code scanning, liveness detection, ID card network verification, face recognition, customer password, mobile phone verification code, eID (based on cryptographic technology, with smart security chip as the carrier, issued to citizens, and can identify identity online remotely without leaking identity information), etc. Various business scenarios and verification methods can be flexibly parameterized and configured, as shown in Table 1.

[0044] Table 1 First level basic certification

[0045]

[0046] In the embodiment of the present invention, the transaction risk control model is determined in the following manner:

[0047] Based on the customer's historical transaction information, the transaction behavior characteristics are statistically analyzed using the Apriori algorithm in big data mining;

[0048] Determine the transaction probability (the probability range of each business scenario) based on the transaction behavior characteristics;

[0049] The risk level is determined based on the transaction probability, and the mapping relationship between the transaction behavior characteristics, transaction probability and risk level is determined as a transaction risk control model.

[0050] Based on the transaction risk control model, determining the risk level of the transaction according to the transaction information includes:

[0051] The transaction behavior characteristics are determined according to the transaction information, and the corresponding risk level is determined according to the mapping relationship between the transaction behavior characteristics, transaction probability and risk level.

[0052] Specifically, the transaction risk control model characterizes the customer's trading habits by collecting historical transaction information and using big data mining technology.

[0053] First, collect the customer's historical transaction data, and try to collect scenario data in various dimensions, including channels, bank card types, transaction methods, transaction amounts, transaction times, customer reserved addresses, career directions, device locations, device serial numbers, device IPs, etc.

[0054] Based on the customer's historical transaction information, the Apriori algorithm in big data mining is used to count the customer's transaction behavior characteristics, such as within a certain time period, in a certain place, on a certain channel, on which device, and through which transaction method, and calculate the transaction probability of each transaction scenario. According to the probability of the customer making the transaction, the risk level of the transaction is determined, as shown in Table 2.

[0055] Table 2 Transaction probability and risk level

[0056] Transaction Probability Risk Level 0.95 and above none 0.75 and above Low 0.2 and above middle 0.05 and above high 0.05 or less Very high

[0057] The Apriori algorithm is a basic algorithm for discovering frequent item sets. It uses an iterative method of layer-by-layer search, where k item sets are used to explore (k+1) item sets. By scanning the database, accumulating the count of each item, and collecting items that meet the minimum support, the set of frequent item 1 is found, recorded as L1. Then, L1 is used to find the set of frequent item 2, L2, and then L2 is used to find the set of frequent item 3, L3, and so on, until the final set of frequent data items is found.

[0058] First, construct the initial data item set {transaction channel, bank card type, transaction method, transaction amount, transaction time, customer reserved address, occupation direction, device location, device serial number, device IP}, and the data items are marked as D1, D2 to D 10 Then, the frequent data set of the data item set is found according to the Apriori algorithm.

[0059] Now assume that the number of transactions initiated by a customer within 5 days is 10. Then use the following steps to find the frequent data set and the transaction probability of each transaction scenario.

[0060] The first step is to scan the information of these 10 transactions, as shown in Table 3, counting the number of occurrences of each data item.

[0061] Table 3 Initial data item set corresponding to the transaction

[0062]

[0063] In the second step, assuming that the minimum support count is 2, the initial set L1 of frequent items can be determined, which consists of candidate data items that meet the minimum support. Among them, according to the historical transaction data, the number of non-empty values ​​of each data item in the data item set in each transaction information is counted. If the number of these non-empty data items is greater than or equal to the minimum support, they are counted in the candidate data item set.

[0064] Set the data set L1 to {D1,D2,D3,D4,D5,D6,D7,D8,D9,D 10}, first generate candidate C1 from L1. Then filter out the dataset L2 that meets the minimum support from the candidate dataset C1 until the final frequent dataset is found.

[0065] like Figure 2 As shown in FIG. 1 , the frequent data set found by the Apriori algorithm is X={D1, D2, D3, D4, D5, D6, D9}, that is, {transaction channel, bank card type, transaction method, transaction amount, transaction time, customer reserved address, device serial number}. The support count is determined by using historical transaction data statistics according to the Apriori algorithm.

[0066] The third step is to directly generate strong association rules between data items such as D1 and D2 from the frequent data set, and statistically analyze the credibility between various data items. The non-empty subsets of X can be divided into {D1, D2, D3, D4}, {D1, D2, D3, D4, D5}, {D1, D2, D3, D4, D5, D6}, {D1, D2, D3, D4, D6}, etc.

[0067] Step 4: Calculate the credibility of each non-empty subset of X. When the support count of {D1,D2,D3,D4,D5} is 10 and the support count of {D1,D2,D3,D4,D5,D6,D9} is 5, since the total number of transactions is 10, then The credibility is 2, The credibility is 1. The credibility calculation formula is as follows:

[0068] Credibility = support count / total number of transactions.

[0069] The fifth step is to calculate the probability value of a specific transaction scenario that satisfies each non-empty subset based on the value range of each data item (based on historical transaction data, the possible values ​​of each data item are calculated, such as transaction channels, which may include ATM, POS, telephone banking, mobile banking, counter, etc.). For example, if {D1 = ATM channel, D2 = real card, D3 = no card, D4 = 100 yuan, D5 = 20220101} is counted, the number of transactions in this scenario is 2, The credibility is 1. Since the total number of transactions is 10, the weighted transaction probability of this scenario is P = (2 × 1) / 10 = 0.2, and the credibility is used as the weighting coefficient. The transaction probability calculation formula is as follows:

[0070] Transaction probability = (number of transactions × credibility) / total number of transactions.

[0071] After calculating the transaction probability, the scenario corresponding to the transaction probability (i.e. including the transaction behavior characteristics), the transaction probability and the risk level are mapped to obtain a mapping relationship among the transaction behavior characteristics, the transaction probability and the risk level. The mapping relationship among the transaction behavior characteristics, the transaction probability and the risk level is determined as the transaction risk control model.

[0072] When a transaction occurs, the transaction behavior characteristics are determined through the current transaction information (i.e. within a certain time period, in a certain place, on a certain channel, on which device, through which transaction method, that is, which data items are involved), and then based on the mapping relationship between the transaction behavior characteristics, transaction probability and risk level, the corresponding transaction probability and risk level are matched.

[0073] In an embodiment of the present invention, determining a second risk authentication method according to the risk level and the transaction information includes:

[0074] Determine the transaction channel based on the transaction information;

[0075] The second level of risk authentication is determined based on the transaction channel and the risk level.

[0076] Specifically, the second-factor identity authentication can be parameterized according to the transaction risk level identified by the transaction risk model and the second-factor authentication method formulated for the specific business scenario, as shown in Table 4.

[0077] Table 4 Second level basic certification

[0078]

[0079] Specifically, different risk management measures can be set for different risk levels.

[0080] If the risk level is judged as no risk or low risk, the authentication is passed and the verification success is returned to the front end;

[0081] For customers with medium or high risk levels, a second level of identity authentication will be performed on them; specific methods may include SMS verification code, face recognition, liveness detection, image verification code, etc.

[0082] If the risk rules determine that the risk is extremely high, a rejection of the transaction will be sent to the transaction channel.

[0083] The present invention also provides a bank debit card transaction risk control device based on dual authentication (i.e., a unified identity authentication platform), as described in the following embodiments. Since the principle of solving the problem by the device is similar to that of the bank debit card transaction risk control method based on dual authentication, the implementation of the device can refer to the implementation of the bank debit card transaction risk control method based on dual authentication, and the repeated parts will not be repeated.

[0084] Figure 3 FIG. 1 is a structural diagram of a bank debit card transaction risk control device based on dual authentication in an embodiment of the present invention (i.e., a unified identity authentication platform). Figure 3 As shown, the bank debit card transaction risk control device based on dual authentication includes:

[0085] A first basic authentication method determination module 02, configured to receive transaction information sent by a transaction channel end, determine a first basic authentication method according to the transaction information, and return the first basic authentication method to the transaction channel end;

[0086] The first basic authentication module 04 is used to receive the first authentication information sent by the transaction channel end, perform the first basic authentication on the customer identity based on the first authentication information, and feed back the first basic authentication result to the transaction channel end; wherein the first authentication information is input by the customer to the transaction channel end based on the first basic authentication method;

[0087] A second basic authentication method determination module 06 is used to determine the risk level of the transaction according to the transaction information based on the transaction risk control model after the first basic authentication is successful, determine the second risk authentication method according to the risk level and the transaction information, and return the second risk authentication method to the transaction channel end;

[0088] The second basic authentication module 08 is used to receive the second authentication information sent by the transaction channel end, perform a second risk authentication on the customer identity based on the second authentication information, and feed back the second risk authentication result to the transaction channel end, and the transaction channel end performs subsequent corresponding processing of the transaction based on the second risk authentication result; wherein, the second authentication information is input by the customer into the transaction channel end based on the second risk authentication method.

[0089] In the embodiment of the present invention, the first basic authentication mode determination module is specifically used for:

[0090] Determine transaction channels and business scenarios based on the transaction information;

[0091] The first level of basic authentication method is determined based on the transaction channel and business scenario.

[0092] In the embodiment of the present invention, the second basic authentication mode determination module is specifically used for:

[0093] Determine the transaction risk control model as follows:

[0094] Based on the customer's historical transaction information, the transaction behavior characteristics are statistically analyzed using the Apriori algorithm;

[0095] Determining a transaction probability based on the transaction behavior characteristics;

[0096] The risk level is determined based on the transaction probability, and the mapping relationship between the transaction behavior characteristics, transaction probability and risk level is determined as a transaction risk control model.

[0097] In the embodiment of the present invention, the second basic authentication mode determination module is specifically used for:

[0098] The transaction behavior characteristics are determined according to the transaction information, and the corresponding risk level is determined according to the mapping relationship between the transaction behavior characteristics, transaction probability and risk level.

[0099] In the embodiment of the present invention, the second basic authentication mode determination module is specifically used for:

[0100] Determine the transaction channel based on the transaction information;

[0101] The second level of risk authentication is determined based on the transaction channel and the risk level.

[0102] The embodiment of the present invention also provides a bank debit card transaction risk control system based on dual authentication, as described in the following embodiment.

[0103] Figure 4 FIG. 1 is a flow chart of a method for implementing dual authentication in a bank debit card transaction risk control system based on dual authentication in an embodiment of the present invention. Figure 4 As shown, the system includes: a transaction channel end and a unified identity authentication platform, and may also include a banking system and a historical transaction information query system. The method flow for implementing dual authentication includes:

[0104] Step 1: The transaction channel receives the transaction information submitted by the customer and sends the transaction information to the unified identity authentication platform.

[0105] Specifically, the customer initiates a transaction request at the channel interface such as POS, ATM, mobile banking, counter, smart counter, and online banking, and the bank channel sends the transaction information to the unified identity authentication platform for customer identity authentication.

[0106] Step 2: The unified identity authentication platform receives the transaction information sent by the transaction channel end, determines the first basic authentication method according to the transaction channel and the business scenario corresponding to the transaction information, and returns the first basic authentication method to the transaction channel end; the transaction channel end receives the first authentication information input by the customer based on the first basic authentication method, and sends the first authentication information to the unified identity authentication platform; the unified identity authentication platform receives the first authentication information sent by the transaction channel end, performs a first basic authentication on the customer's identity based on the first authentication information, and feeds back the first basic authentication result to the transaction channel end.

[0107] Specifically, based on the transaction scenario parameters configured by the business personnel, the unified identity authentication platform will feedback the required authentication method to the channel end. The bank channel end will prompt the customer to enter the password, SMS verification code, perform face recognition, etc., and send the verification information entered by the customer to the authentication platform to complete the verification of the customer information.

[0108] Step 3: After the first basic authentication is successful, the unified identity authentication platform determines the risk level of the transaction according to the transaction information based on the transaction risk control model, determines the second risk authentication method according to the risk level and the transaction information, and returns the second risk authentication method to the transaction channel end. The transaction channel end receives the second authentication information input by the customer based on the second risk authentication method, and sends the second authentication information to the unified identity authentication platform. The unified identity authentication platform receives the second authentication information sent by the transaction channel end, performs a second risk authentication on the customer identity based on the second authentication information, and feeds back the second risk authentication result to the transaction channel end.

[0109] Specifically, after the first basic authentication is successful, the identity authentication platform sends the transaction information to the transaction risk model. The model identifies the risk level of the transaction based on the transaction information and feeds back the risk level of the transaction to the identity authentication platform. Based on the transaction scenario and transaction risk level configured by the business, the identity authentication platform performs the second authentication. The channel end prompts the customer to perform the corresponding operation (enter password, send SMS verification code, perform face recognition, etc.), and sends the verification information to the identity authentication platform to complete the second verification of customer information.

[0110] Step 4: The transaction channel performs subsequent corresponding processing of the transaction based on the results of the second risk authentication.

[0111] Step 5: If the verification result indicates that the identity authentication is successful, the transaction information will be sent to the bank system, and the bank system will process the transaction and return the transaction result to the channel end. If the verification fails, the customer will be prompted that the verification failed.

[0112] Step 6: The banking system sends the relevant transaction information to the historical information query system to collect and analyze customer transaction information.

[0113] Step 7: The historical information query system identifies the customer's transaction data through statistical analysis, and sends the customer's transaction habits and the results of statistical analysis to the transaction risk control model again, providing a data basis for the processing of subsequent transactions.

[0114] The acquisition, storage, use, and processing of data in the technical solution of this application comply with the relevant provisions of national laws and regulations.

[0115] An embodiment of the present invention also provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned bank debit card transaction risk control method based on dual authentication when executing the computer program.

[0116] An embodiment of the present invention further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the bank debit card transaction risk control method based on dual authentication is implemented.

[0117] An embodiment of the present invention further provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the bank debit card transaction risk control method based on dual authentication is implemented.

[0118] In the embodiments of the present invention, compared with the technical solution in the prior art in which each channel end only defines a method for verifying the customer identity according to its own transaction rules and only uses a single basic identity authentication, the present invention utilizes a unified identity authentication platform to authenticate the user identity, can provide unified rules to verify the customer identity, and has a flexible and parameterizable authentication method. In addition to performing a single basic identity authentication on the customer identity, after the single basic identity authentication is passed, the risk level of the transaction is determined based on the transaction information based on the transaction risk control model, and the need for a second risk authentication is determined based on the risk level and the transaction information. After two identity authentications, the probability of customers being mistakenly identified as fraudulent can be reduced, thereby improving customer experience.

[0119] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0120] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0121] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0122] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0123] The specific embodiments described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A bank debit card transaction risk control method based on dual authentication, characterized in that: Applied to the unified identity authentication platform, including: receiving transaction information sent by the transaction channel end, determining a first basic authentication method according to the transaction information, and returning the first basic authentication method to the transaction channel end; receiving the first authentication information sent by the transaction channel end, performing a first basic authentication on the customer identity based on the first authentication information, and feeding back the first basic authentication result to the transaction channel end; wherein the first authentication information is input by the customer to the transaction channel end based on the first basic authentication method; After the first basic authentication is successful, based on the transaction risk control model, the risk level of the transaction is determined according to the transaction information, a second risk authentication method is determined according to the risk level and the transaction information, and the second risk authentication method is returned to the transaction channel end; Receiving the second authentication information sent by the transaction channel end, performing a second risk authentication on the customer identity based on the second authentication information, feeding back the second risk authentication result to the transaction channel end, and the transaction channel end performs subsequent corresponding processing of the transaction based on the second risk authentication result; wherein the second authentication information is input by the customer into the transaction channel end based on the second risk authentication method; The transaction risk control model is determined in the following manner: based on the historical transaction information of the customer, the transaction behavior characteristics are counted according to the Apriori algorithm; the transaction probability is determined according to the transaction behavior characteristics; the risk level is determined based on the transaction probability, and the mapping relationship between the transaction behavior characteristics, transaction probability and risk level is determined as the transaction risk control model; Determining the risk level of the transaction according to the transaction information based on the transaction risk control model, including: determining transaction behavior characteristics according to the transaction information, and determining the corresponding risk level according to the mapping relationship between the transaction behavior characteristics, transaction probability and risk level; Determining a second risk authentication method according to the risk level and the transaction information includes: determining a transaction channel according to the transaction information; and determining a second risk authentication method according to the transaction channel and the risk level.

2. The bank debit card transaction risk control method based on dual authentication as claimed in claim 1, characterized in that: The first level of basic authentication is determined based on the transaction information, including: Determine transaction channels and business scenarios based on the transaction information; The first level of basic authentication method is determined based on the transaction channel and business scenario.

3. A bank debit card transaction risk control device based on dual authentication, characterized in that: Applied to the unified identity authentication platform, including: A first basic authentication method determination module, configured to receive transaction information sent by a transaction channel end, determine a first basic authentication method according to the transaction information, and return the first basic authentication method to the transaction channel end; A first-level basic authentication module is used to receive the first-level authentication information sent by the transaction channel end, perform the first-level basic authentication on the customer identity based on the first-level authentication information, and feed back the first-level basic authentication result to the transaction channel end; wherein the first-level authentication information is input by the customer to the transaction channel end based on the first-level basic authentication method; A second basic authentication method determination module is used to determine the risk level of the transaction according to the transaction information based on the transaction risk control model after the first basic authentication is successful, determine the second risk authentication method according to the risk level and the transaction information, and return the second risk authentication method to the transaction channel end; A second basic authentication module is used to receive the second authentication information sent by the transaction channel end, perform a second risk authentication on the customer identity based on the second authentication information, and feed back the second risk authentication result to the transaction channel end, and the transaction channel end performs subsequent corresponding processing of the transaction according to the second risk authentication result; wherein the second authentication information is input by the customer into the transaction channel end based on the second risk authentication method; The second basic authentication method determination module is specifically used to: determine the transaction risk control model in the following manner: based on the customer's historical transaction information, calculate the transaction behavior characteristics according to the Apriori algorithm; determine the transaction probability according to the transaction behavior characteristics; determine the risk level based on the transaction probability, and determine the mapping relationship between the transaction behavior characteristics, transaction probability and risk level as the transaction risk control model; The second basic authentication method determination module is specifically used to: determine the transaction behavior characteristics according to the transaction information, and determine the corresponding risk level according to the mapping relationship between the transaction behavior characteristics, transaction probability and risk level; The second basic authentication method determination module is specifically used to: determine the transaction channel according to the transaction information; and determine the second risk authentication method according to the transaction channel and the risk level.

4. The bank debit card transaction risk control device based on dual authentication as claimed in claim 3, characterized in that: The first basic authentication method determination module is specifically used for: Determine transaction channels and business scenarios based on the transaction information; The first level of basic authentication method is determined based on the transaction channel and business scenario.

5. A bank debit card transaction risk control method based on dual authentication, characterized in that: include: The transaction channel receives the transaction information submitted by the customer and sends the transaction information to the unified identity authentication platform; The unified identity authentication platform receives the transaction information sent by the transaction channel end, determines the first basic authentication method according to the transaction information, and returns the first basic authentication method to the transaction channel end; The transaction channel receives the first authentication information input by the customer based on the first basic authentication method, and sends the first authentication information to the unified identity authentication platform; The unified identity authentication platform receives the first authentication information sent by the transaction channel end, performs a first basic authentication on the customer identity based on the first authentication information, and feeds back the first basic authentication result to the transaction channel end; After the first basic authentication is successful, the unified identity authentication platform determines the risk level of the transaction according to the transaction information based on the transaction risk control model, determines the second risk authentication method according to the risk level and the transaction information, and returns the second risk authentication method to the transaction channel end; The transaction channel receives the second authentication information input by the customer based on the second risk authentication method, and sends the second authentication information to the unified identity authentication platform; The unified identity authentication platform receives the second authentication information sent by the transaction channel end, performs a second risk authentication on the customer identity based on the second authentication information, and feeds back the second risk authentication result to the transaction channel end; The transaction channel carries out subsequent corresponding processing of the transaction based on the second risk authentication result; The transaction risk control model is determined in the following manner: based on the historical transaction information of the customer, the transaction behavior characteristics are counted according to the Apriori algorithm; the transaction probability is determined according to the transaction behavior characteristics; the risk level is determined based on the transaction probability, and the mapping relationship between the transaction behavior characteristics, transaction probability and risk level is determined as the transaction risk control model; Determining the risk level of the transaction according to the transaction information based on the transaction risk control model, including: determining transaction behavior characteristics according to the transaction information, and determining the corresponding risk level according to the mapping relationship between the transaction behavior characteristics, transaction probability and risk level; Determining a second risk authentication method according to the risk level and the transaction information includes: determining a transaction channel according to the transaction information; and determining a second risk authentication method according to the transaction channel and the risk level.

6. The bank debit card transaction risk control method based on dual authentication as claimed in claim 5, characterized in that: The first level of basic authentication is determined based on the transaction information, including: Determine transaction channels and business scenarios based on the transaction information; The first level of basic authentication method is determined based on the transaction channel and business scenario.

7. The bank debit card transaction risk control method based on dual authentication as claimed in claim 5, characterized in that: The transaction channel will carry out subsequent corresponding processing of the transaction based on the second risk authentication result, including: If the second risk authentication result indicates that the verification is successful, the transaction information is sent to the bank system, and the bank system performs corresponding transaction processing according to the transaction information; If the second risk authentication result indicates that the verification failed, the customer will be prompted that the verification failed.

8. The bank debit card transaction risk control method based on dual authentication as claimed in claim 7, characterized in that: Also includes: The bank system sends the processed transaction information to the historical transaction information query system; The historical transaction information query system collects statistics on the customer's historical transaction information and sends the historical transaction information to the transaction risk control model for transaction risk analysis and evaluation.

9. A bank debit card transaction risk control system based on dual authentication, characterized in that: include: The transaction channel end and the unified identity authentication platform are used to implement the bank debit card transaction risk control method based on dual authentication as described in any one of claims 5 to 8.

10. The bank debit card transaction risk control system based on dual authentication as claimed in claim 9, characterized in that: Also includes: Banking system.

11. The bank debit card transaction risk control system based on dual authentication as claimed in claim 9, characterized in that: Also includes: The historical transaction information query system is used to collect statistics on the customer's historical transaction information and send the historical transaction information to the transaction risk control model for transaction risk analysis and evaluation.

12. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the bank debit card transaction risk control method based on dual authentication according to any one of claims 1 to 2 and 5 to 8 is implemented.

13. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, it implements the bank debit card transaction risk control method based on dual authentication as described in any one of claims 1 to 2 and 5 to 8.

14. A computer program product, characterized in that The computer program product includes a computer program, and when the computer program is executed by a processor, it implements the bank debit card transaction risk control method based on dual authentication as described in any one of claims 1 to 2 and 5 to 8.

Images