A method and device for checking a leakage source of express mail sheet information
By calculating the risk concentration and density of sources of leakage of express waybill information, high-risk entities are screened out for investigation, which solves the problems of low efficiency and high cost in the investigation of sources of leakage of waybill information in the express industry, and achieves efficient and low-cost investigation results.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- SHANGHAI SHENXUE SUPPLY CHAIN MANAGEMENT CO LTD
- Filing Date
- 2023-02-07
- Publication Date
- 2026-07-21
AI Technical Summary
The express delivery industry faces low efficiency and high costs in investigating the sources of leaked waybill information, making it difficult to effectively identify and track the sources of leakage.
By obtaining the risk concentration and risk level of the entities to be investigated, calculating the risk value and comparing it with a preset threshold, high-risk entities are screened out for further investigation.
It improved the efficiency and accuracy of identifying sources of leaked express waybill information and reduced the cost of investigation.
Smart Images
Figure CN116090826B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the technical field of information traceability, and in particular to a method and apparatus for investigating the source of leakage of express waybill information. Background Technology
[0002] Today, society has increasingly higher requirements for the protection of personal information, and regulatory authorities have successively introduced laws and regulations on personal information protection, such as the "Data Security Law" and the "Personal Information Protection Law," requiring companies to be responsible for the information security of their users. On the other hand, due to the existence of the online black market, these black market operators infiltrate various business processes of companies to obtain user information and then sell it.
[0003] Especially for courier companies, the offline business environment leads to the recruitment of a large number of low-wage and unstable contract workers, outsourced workers, and temporary workers. These individuals are easily tempted by high wages from the black market, leading them to photograph, store, and then leak the waybills they handle. Ordinary waybills contain a wealth of user information, yet this information is exposed at every stage of the courier process, making them easily vulnerable to being secretly photographed and leaked on the black market. This can cause users to be scammed, leading to complaints from users to courier companies or regulatory authorities. Large-scale leaks can even result in penalties from regulatory bodies. The courier industry's post-incident investigation of secretly photographed waybills often relies solely on reviewing footage from surveillance equipment to identify abnormal employee behavior. This method is time-consuming, heavily reliant on camera deployment, and inefficient; furthermore, it requires a large-scale deployment of cameras, resulting in high costs.
[0004] Currently, there is an urgent need for a new method to investigate the source of leaked express waybill information in order to solve the above problems. Summary of the Invention
[0005] This application provides a method and device for investigating the source of leakage of express waybill information, which is applied to the express waybill management platform to solve the problem that the express industry often can only find out the behavior of employees leaking waybills through monitoring equipment, resulting in low investigation efficiency and high investment costs.
[0006] The first aspect of this application provides a method for investigating the source of leakage of express delivery waybill information, applied to an express delivery waybill management platform. The method includes: obtaining entities to be investigated, including a first entity to be investigated, the entities to be investigated being entities involved in the entire process cycle of the leaked express delivery waybill, and at least one entity being involved in the entire process cycle of any leaked express delivery waybill; obtaining the risk concentration of the first entity to be investigated; obtaining the risk concentration of the first entity to be investigated; obtaining a first risk value of the first entity to be investigated, the first risk value being determined based on one or both of risk concentration and risk concentration; determining whether the first risk value is greater than or equal to a risk threshold; when the first risk value is greater than or equal to the risk threshold, determining the first entity to be investigated as a high-leaking-risk entity, and performing a risk investigation operation on the first entity to be investigated.
[0007] This application uses the above method to screen out high-risk entities, thereby improving the efficiency and accuracy of subsequent risk screening.
[0008] In one possible implementation, obtaining the risk concentration of the first subject to be investigated specifically includes: obtaining a risk factor value, the risk factor value being determined by the number of express delivery waybills involving the first subject to be investigated in the leaked express delivery waybills; the risk concentration is configured as the ratio of the risk factor value to the number of leaked express delivery waybills.
[0009] This application uses the above method to obtain risk concentration, which is used to determine whether the entity to be investigated is a high-risk entity.
[0010] In one possible implementation, obtaining the risk concentration of the first subject to be investigated based on the risk concentration specifically includes: obtaining a risk factor value, which is determined by the number of express delivery waybills involving the first subject to be investigated among all the leaked express delivery waybills; obtaining the workload of the first subject to be investigated within a preset time period, where the workload is the number of express delivery waybills processed by the first subject to be investigated within the preset time period; and configuring the risk concentration as the ratio of the risk factor value to the workload.
[0011] This application uses the above method to obtain risk concentration in order to determine whether the subject to be investigated is a high-risk subject.
[0012] In one possible implementation, the method for obtaining the first risk value of the first subject to be investigated specifically includes any of the following methods: obtaining the risk concentration ranking number of the first subject to be investigated, the risk concentration ranking number being used to determine the first risk value; wherein, the subjects to be investigated are sorted in descending order of risk concentration values to obtain the risk concentration ranking number of the first subject to be investigated; obtaining the risk concentration ranking number of the first subject to be investigated, the risk concentration ranking number being used to determine the first risk value; wherein, the subjects to be investigated are sorted in descending order of risk concentration values to obtain the risk concentration ranking number of the first subject to be investigated.
[0013] This application uses the above method to obtain the risk concentration ranking number and the risk concentration ranking number, in order to determine whether the subject to be investigated is a high-risk subject.
[0014] In one possible implementation, the method for determining whether the first risk value is greater than or equal to the risk threshold includes any of the following: when the risk threshold is a preset risk concentration ranking threshold, the risk concentration ranking number of the first subject to be investigated is determined to be greater than or equal to the preset risk concentration ranking threshold; when the risk threshold is a preset risk concentration ranking threshold, the risk concentration ranking number of the first subject to be investigated is determined to be greater than or equal to the preset risk concentration ranking threshold.
[0015] This application proposes a method for identifying high-risk entities under two scenarios: when the risk threshold is a preset risk concentration ranking threshold or a preset risk concentration ranking threshold.
[0016] In one possible implementation, determining the first subject to be investigated as a high-risk subject for leakage includes any of the following methods: determining that the risk concentration of the first subject to be investigated is greater than or equal to a preset risk concentration threshold; wherein, a first risk value is configured as the risk concentration of the first subject to be investigated, and a risk threshold is configured as a preset risk concentration threshold; determining that the risk concentration of the first subject to be investigated is greater than or equal to a preset risk concentration threshold; wherein, a first risk value is configured as the risk concentration of the first subject to be investigated, and a risk threshold is configured as a preset risk concentration threshold.
[0017] This application employs the aforementioned method, proposing that a first risk value be configured as the risk concentration of a first entity to be investigated, and a risk threshold be configured as a preset risk concentration threshold; or that a first risk value be configured as the risk concentration of a first entity to be investigated, and a risk threshold be configured as a preset risk concentration threshold. In both of these scenarios, it is possible to identify high-risk entities.
[0018] In one possible implementation, the processing time of any of the leaked express waybills is within a preset time period, which is used to determine the entire process cycle of the express waybill.
[0019] This application uses the above method to limit the preset time period in order to make the judgment of high-risk entities more accurate.
[0020] In one possible implementation, performing risk screening actions on the first entity to be screened includes: querying video information of the first entity to be screened when processing the leaked express waybill, in order to determine whether the processing operation of the first entity to be screened complies with preset operation rules.
[0021] In one possible implementation, the first risk value of the subject to be investigated is determined by the following formula: A = C%A1 + B%A2, C% + B% = 1; where A is the first risk value; A1 is the risk concentration; A2 is the risk concentration; C% is the percentage weight of the risk concentration; and B% is the percentage weight of the risk concentration.
[0022] The risk threshold is determined by the following formula:
[0023] Q=C%Q1+B%Q2, C%+B%=1;
[0024] Where Q is the risk threshold; Q1 is the risk concentration threshold; and Q2 is the risk concentration threshold.
[0025] This application uses the above method to conduct risk screening operations on entities identified as high-risk entities, in order to determine whether the handling operations of the first entity to be screened comply with the preset operation regulations.
[0026] The second aspect of this application provides a device for investigating the leakage source of express delivery waybill information. The device includes: an acquisition module, a judgment module, and an execution module. The acquisition module acquires the subject to be investigated, including a first subject to be investigated, which is the subject involved in the entire process cycle of the leaked express delivery waybill, and at least one subject is involved in the entire process cycle of any leaked express delivery waybill; acquires the risk concentration of the first subject to be investigated; acquires the risk concentration of the first subject to be investigated; acquires a first risk value of the first subject to be investigated, which is determined based on one or both of risk concentration and risk concentration; the judgment module judges whether the first risk value is greater than or equal to a risk threshold; the execution module determines the first subject to be investigated as a high-leaking-risk subject when the first risk value is greater than or equal to the risk threshold, and performs a risk investigation operation on the first subject to be investigated.
[0027] In one possible implementation, the acquisition module includes a concentration acquisition unit; the concentration acquisition unit acquires risk factor values, the risk factor values being determined by the number of express delivery waybills involved in the first subject to be investigated among the leaked express delivery waybills; the risk concentration is configured as the ratio of the risk factor value to the number of leaked express delivery waybills.
[0028] In one possible implementation, the acquisition module includes a concentration acquisition unit; the concentration acquisition unit acquires a risk factor value, the risk factor value being determined by the number of express delivery waybills involving the first subject to be investigated among all leaked express delivery waybills; acquires the workload of the first subject to be investigated within a preset time period, the workload being the number of express delivery waybills processed by the first subject to be investigated within the preset time period; the risk concentration is configured as the ratio of the risk factor value to the workload.
[0029] In one possible implementation, the acquisition module includes a risk value acquisition unit; the risk value acquisition unit acquires a first risk value of the first subject to be investigated; the risk value acquisition unit includes a first risk value acquisition subunit and a second risk value acquisition subunit;
[0030] The first risk value acquisition subunit acquires the risk concentration ranking number of the first subject to be investigated. The risk concentration ranking number is used to determine the first risk value. The subjects to be investigated are sorted in descending order of risk concentration value to obtain the risk concentration ranking number of the first subject to be investigated.
[0031] The second risk value acquisition subunit acquires the risk concentration ranking number of the first subject to be investigated. The risk concentration ranking number is used to determine the first risk value. The subjects to be investigated are sorted in descending order of risk concentration value to obtain the risk concentration ranking number of the first subject to be investigated.
[0032] In one possible implementation, the judgment module includes a sorting judgment unit; the sorting judgment unit determines whether a first risk value is greater than or equal to a risk threshold; the sorting judgment unit includes a first sorting judgment subunit and a second sorting judgment subunit; the first sorting judgment subunit, when the risk threshold is a preset risk concentration sorting threshold, determines that the risk concentration sorting number of the first subject to be investigated is greater than or equal to the preset risk concentration sorting threshold; the second sorting judgment subunit, when the risk threshold is a preset risk concentration sorting threshold, determines that the risk concentration sorting number of the first subject to be investigated is greater than or equal to the preset risk concentration sorting threshold.
[0033] In one possible implementation, the device further includes a confirmation module; the confirmation module determines that the first subject to be investigated is a high-leakage-risk subject; the confirmation module includes a first confirmation unit and a second confirmation unit; the first confirmation unit determines that the risk concentration of the first subject to be investigated is greater than or equal to a preset risk concentration threshold; wherein, a first risk value is configured as the risk concentration of the first subject to be investigated, and a risk threshold is configured as a preset risk concentration threshold; the second confirmation unit determines that the risk concentration of the first subject to be investigated is greater than or equal to a preset risk concentration threshold; wherein, the first risk value is configured as the risk concentration of the first subject to be investigated, and a risk threshold is configured as a preset risk concentration threshold.
[0034] In one possible implementation, the processing time of any of the leaked express waybills is within a preset time period, which is used to determine the entire process cycle of the express waybill.
[0035] In one possible implementation, the execution module includes a first execution unit; the first execution unit queries video information of the first subject to be investigated when processing the leaked express waybill, in order to determine whether the processing operation of the first subject to be investigated complies with preset operation rules.
[0036] A third aspect of this application provides an electronic device, which includes a processor, a memory, a user interface, and a network interface. The memory is used to store instructions, the user interface and the network interface are used to communicate with other devices, and the processor is used to execute the instructions stored in the memory to cause the electronic device to perform any of the methods described above.
[0037] A fourth aspect of this application provides a computer-readable storage medium storing instructions that, when executed, perform any of the methods described above.
[0038] Compared with related technologies, the beneficial effects of this application are: in the process of investigating the source of leakage of express waybill information, the entities that may need to be investigated can be pre-screened, thereby improving the investigation efficiency and reducing the investigation cost. Attached Figure Description
[0039] Figure 1 This is a flowchart illustrating a method for investigating the leakage source of express waybill information provided in an embodiment of this application;
[0040] Figure 2 This is a schematic diagram illustrating a method for investigating the leakage source of express waybill information provided in an embodiment of this application;
[0041] Figure 3 This is a schematic diagram of a scenario for another method for investigating the leakage source of express waybill information provided in the embodiments of this application;
[0042] Figure 4 This is a schematic diagram illustrating a scenario for another method of investigating the leakage source of express waybill information provided in this application embodiment;
[0043] Figure 5 This is a schematic diagram illustrating the principle of a method for investigating the leakage source of express waybill information provided in an embodiment of this application;
[0044] Figure 6 This is a schematic diagram illustrating the principle of another method for investigating the leakage source of express waybill information provided in the embodiments of this application;
[0045] Figure 7 This is a schematic diagram of the structure of a device for investigating the leakage source of express waybill information provided in an embodiment of this application;
[0046] Figure 8 This is a schematic diagram of the structure of another device for investigating the leakage source of express waybill information provided in the embodiments of this application;
[0047] Figure 9 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Detailed Implementation
[0048] To enable those skilled in the art to better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments.
[0049] In the description of the embodiments of this application, words such as "illustrative," "for example," or "for example" are used to indicate examples, illustrations, or explanations. Any embodiment or design described as "illustrative," "for example," or "for example" in the embodiments of this application should not be construed as being more preferred or advantageous than other embodiments or design solutions. Rather, the use of words such as "illustrative," "for example," or "for example" is intended to present the relevant concepts in a specific manner.
[0050] In the description of the embodiments of this application, the term "and / or" is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, B existing alone, and A and B existing simultaneously. Furthermore, unless otherwise stated, the term "multiple" means two or more. For example, multiple systems refer to two or more systems, and multiple screen terminals refer to two or more screen terminals. In addition, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the indicated technical features. Thus, features defined with "first" and "second" can explicitly or implicitly include one or more of that feature. The terms "comprising," "including," "having," and their variations all mean "including but not limited to," unless otherwise specifically emphasized. The express delivery waybill management platform in the embodiments of this application refers to a device applied to various stages of express delivery companies in handling the flow, collection, and monitoring of express delivery waybills.
[0051] Figure 1 This is a flowchart illustrating a method for investigating the source of leakage of express waybill information provided in an embodiment of this application. Figure 1 As shown, it includes steps S101-S106.
[0052] Step S101: Obtain the subject to be investigated. The subject to be investigated includes a first subject to be investigated. The subject to be investigated is the subject involved in the entire process cycle of the leaked express waybill. At least one subject is involved in the entire process cycle of any of the leaked express waybills.
[0053] In this application embodiment, the subject to be investigated refers to all subjects involved in the entire process of leaking express waybills.
[0054] For example, the process of sending and receiving express deliveries has three stages, such as... Figure 2 , Figure 3 as well as Figure 4 The process includes pickup, transit, and delivery. Each stage has several operational steps: pickup involves door-to-door pickup, sorting, and transportation; transit involves port entry, port exit, and transportation; and delivery involves transportation, sorting, and door-to-door pickup. Every package goes through these processes. We've uniquely identified the operators in each step and embedded them into each process step. This ensures that for any package, all operators who handled it throughout its lifecycle are recorded and can be located. Each package has two sets of information: the tracking number (a unique identifier) and information about the operators at each stage. We can use the tracking number to find information about all operators associated with that tracking number.
[0055] like Figure 2 As shown, an example illustrates the identity identifiers of the operators involved in various processes during the pickup stage of a leaked express waybill. For instance, in the pickup stages of both express waybill number KNDO001 and express waybill number KNDO255, the operator with the identity identifier LJ001 appeared during the sorting and scanning operations.
[0056] like Figure 3 As shown, an example illustrates the identity identifiers of the operators involved in various processes during the transit stage of a leaked express waybill. For instance, in the pickup stage of express waybill number KNDO078 and express waybill number KNDO483, the operator with the identity identifier ZZ076 appeared in the package scanning operation.
[0057] like Figure 4 As shown, an example illustrates the identity identifiers of the operators involved in various processes during the delivery stage of a leaked express waybill. For instance, in the delivery stages of both express waybill number KNDO002 and express waybill number KNDO0255, an operator with the identifier PJ255 appeared during the accompanying vehicle operation.
[0058] Step S102: Obtain the risk concentration of the first subject to be investigated.
[0059] In one possible implementation, obtaining the risk concentration of the first subject to be investigated specifically includes: obtaining a risk factor value, the risk factor value being determined by the number of express delivery waybills involving the first subject to be investigated in the leaked express delivery waybills; the risk concentration is configured as the ratio of the risk factor value to the number of leaked express delivery waybills.
[0060] For example, such as Figure 2 As shown, when the identity identifier of the first entity to be investigated is LJ001, the process is traversed. Figure 2From all the leaked express waybill information from tracking numbers KNDO001 to KNDO999, the number of express waybills with the design identity LJ001 was found to be 2. Therefore, the risk factor value of the first subject to be investigated was 2, and the risk concentration was 2 / 999, which is approximately 0.002002.
[0061] Step S103: Obtain the risk concentration of the first subject to be investigated.
[0062] In one possible implementation, obtaining the risk concentration of the first subject to be investigated based on the risk concentration specifically includes: obtaining a risk factor value, which is determined by the number of express delivery waybills involving the first subject to be investigated among all the leaked express delivery waybills; obtaining the workload of the first subject to be investigated within a preset time period, where the workload is the number of express delivery waybills processed by the first subject to be investigated within the preset time period; and configuring the risk concentration as the ratio of the risk factor value to the workload.
[0063] For example, such as Figure 2 As shown, when the identity identifier of the first entity to be investigated is LJ001, the process is traversed. Figure 2 From all leaked express waybill information with tracking numbers KNDO001-KNDO999, the number of waybills with the design identifier LJ001 is found to be 2. Therefore, the risk factor value of the first entity to be investigated is 2, and the risk concentration is 2 / 999, approximately 0.002002. Within a preset time period, the number of express waybills processed by the first entity to be investigated within that period can be queried. For example, from February 2, 2022 to November 11, 2022, the first entity to be investigated processed 666 express waybills. In this case, the risk concentration of the first entity to be investigated is 2 / 666, approximately 0.003003.
[0064] In one possible implementation, the processing time of any of the leaked express waybills is within a preset time period, which is used to determine the entire process cycle of the express waybill.
[0065] For example, such as Figure 2 , Figure 3 or Figure 4 In this embodiment, each of the leaked express delivery waybills has a corresponding processing time period, and the processing time period for each waybill should fall within the preset time period of the first entity to be investigated (e.g., from 2022-02-02 to 2022-11-11). The processing time period of the express delivery waybills is not shown in detail in this embodiment, but there is a corresponding processing time period in the actual express delivery process, which will not be explained in detail here.
[0066] Step S104: Obtain the first risk value of the first subject to be investigated. The first risk value is determined based on one or both of risk concentration and risk concentration.
[0067] In one possible implementation, the method for obtaining the first risk value of the first subject to be investigated specifically includes any of the following methods: obtaining the risk concentration ranking number of the first subject to be investigated, wherein the risk concentration ranking number is used to determine the first risk value; wherein the subjects to be investigated are sorted in descending order of risk concentration values to obtain the risk concentration ranking number of the first subject to be investigated; obtaining the risk concentration ranking number of the first subject to be investigated, wherein the risk concentration ranking number is used to determine the first risk value; wherein the subjects to be investigated are sorted in descending order of risk concentration values to obtain the risk concentration ranking number of the first subject to be investigated, such as... Figure 5 As shown, the size of the risk concentration ranking number is positively correlated with the risk concentration.
[0068] For example, such as Figure 5 As shown, when the identity identifier of the first entity to be investigated is LJ005, as follows: Figure 5 As shown, using the methods for obtaining risk concentration and risk level mentioned above, the entities to be investigated are sorted from highest to lowest risk concentration value to obtain the risk concentration ranking number of the first entity to be investigated. Figure 5 As shown, the risk concentration ranking number of the first entity to be investigated is 995.
[0069] For example, such as Figure 6 As shown, when the identity identifier of the first entity to be investigated is LJ005, as follows: Figure 6 As shown, using the aforementioned methods for obtaining risk concentration and risk level, the entities to be investigated are sorted from highest to lowest risk concentration value to obtain the risk concentration ranking number of the first entity to be investigated. Figure 5 As shown, the risk concentration ranking number of the first subject to be investigated is 984.
[0070] In one possible implementation, determining whether the first risk value is greater than or equal to the risk threshold includes: obtaining the first risk value, which is the sum of the risk concentration ranking number and the risk concentration ranking number; and determining whether the first risk value is greater than or equal to the risk threshold, which is the sum of the preset risk concentration ranking number and the preset risk concentration ranking number.
[0071] In the embodiments of this application, Figure 5 and Figure 6 The risk concentration and risk level of each entity to be investigated are obtained based on the same data, rather than being presented as new examples. Figure 5 and Figure 6The entities with the same identity identifier are used to represent the same entity.
[0072] Step S105: Determine whether the first risk value is greater than or equal to the risk threshold.
[0073] In one possible implementation, the method for determining whether the first risk value is greater than or equal to the risk threshold includes any of the following: when the risk threshold is a preset risk concentration ranking threshold, the risk concentration ranking number of the first subject to be investigated is determined to be greater than or equal to the preset risk concentration ranking threshold; when the risk threshold is a preset risk concentration ranking threshold, the risk concentration ranking number of the first subject to be investigated is determined to be greater than or equal to the preset risk concentration ranking threshold.
[0074] For example, determining whether the first risk value is greater than or equal to the risk threshold includes any of the following methods: when the risk threshold is a preset risk concentration ranking threshold, such as... Figure 5 As shown, the risk threshold is set to a preset risk concentration ranking threshold, i.e., the risk concentration ranking is 990; the identity identifier of the first entity to be investigated is LJ005, and it is determined that the risk concentration ranking number of the first entity to be investigated is greater than or equal to the preset risk concentration ranking threshold. When the risk threshold is the preset risk concentration ranking threshold, such as... Figure 6 As shown, the risk threshold is set to a preset risk concentration ranking threshold, i.e., the risk concentration ranking is 990; the identity identifier of the first subject to be investigated is LJ005, and it is determined that the risk concentration ranking number of the first subject to be investigated is greater than or equal to the preset risk concentration ranking threshold. In this embodiment of the application, the risk ranking numbers are sorted in order of sequence, for example: risk concentration ranking number 998 is greater than risk concentration ranking number 997.
[0075] Step S106: When the first risk value is greater than or equal to the risk threshold, the first subject to be investigated is determined to be a subject with high leakage risk, and a risk investigation operation is performed on the first subject to be investigated.
[0076] In one possible implementation, the method of determining the first subject to be investigated as a high-risk subject to leakage includes: determining that the risk concentration ranking of the first subject to be investigated is greater than or equal to a preset risk concentration ranking threshold.
[0077] In one possible implementation, the method of determining the first subject to be investigated as a high-risk subject to leakage includes: determining that the risk concentration ranking of the first subject to be investigated is greater than or equal to a preset risk concentration ranking threshold.
[0078] In one possible implementation, determining the first subject to be investigated as a high-risk subject for leakage includes any of the following methods: determining that the risk concentration of the first subject to be investigated is greater than or equal to a preset risk concentration threshold; wherein, a first risk value is configured as the risk concentration of the first subject to be investigated, and a risk threshold is configured as a preset risk concentration threshold; determining that the risk concentration of the first subject to be investigated is greater than or equal to a preset risk concentration threshold; wherein, a first risk value is configured as the risk concentration of the first subject to be investigated, and a risk threshold is configured as a preset risk concentration threshold.
[0079] For example, such as Figure 5 As shown, the risk concentration of the first entity to be investigated, identified as LJ005, is 0.02862. The risk concentration threshold is configured to 0.03, indicating that the first entity to be investigated is not a high-risk entity for leakage. Figure 6 As shown, the risk concentration of the first entity to be investigated with the identification number LJ005 is 0.08956, and the risk concentration threshold is configured to 0.1000, thus identifying the first entity to be investigated as a high-risk entity for leakage.
[0080] At the same time, for Figure 5 and Figure 6 For example, when the risk concentration threshold is configured to 0.03 and the risk concentration threshold is configured to 0.1000, two groups of high-leakage-risk entities are obtained using the above two methods, namely LJ001, LJ002, LJ003, LJ004; and LJ001, LJ002, LJ003, LJ006, LJ007, LJ009, LJ010, LJ011, LJ012, LJ013, LJ014, LJ015, and LJ016. Using the above methods, it is easy to see that the method based on the risk concentration threshold can obtain more high-risk entities when the number of entities to be investigated is the same. Therefore, when the total number of entities to be investigated is small, the risk concentration threshold is more suitable as the method for determining the risk threshold, and the first risk value is the risk concentration value; when the total number of entities to be investigated is large, the risk concentration threshold is more suitable as the method for determining the risk threshold, and the first risk value is the risk concentration value.
[0081] In one possible implementation, the first risk value of the subject to be investigated is determined by the following formula: A = C%A1 + B%A2, C% + B% = 1;
[0082] Where A is the first risk value; A1 is the risk concentration; A2 is the risk concentration; C% is the percentage weight of risk concentration; and B% is the percentage weight of risk concentration.
[0083] The risk threshold is determined by the following formula:
[0084] Q=C%Q1+B%Q2, C%+B%=1;
[0085] Where Q is the risk threshold; Q1 is the risk concentration threshold; and Q2 is the risk concentration threshold. The risk threshold, risk concentration threshold, and risk concentration threshold can be obtained through any of the methods described above.
[0086] In one possible implementation, the first risk value of the entity to be investigated is determined by the following formula:
[0087] A = A1 + A2;
[0088] Where A is the first risk value; A1 is the risk concentration; and A2 is the risk concentration.
[0089] The risk threshold is determined by the following formula:
[0090] Q = Q1 + Q2;
[0091] Where Q is the risk threshold; Q1 is the risk concentration threshold; and Q2 is the risk concentration threshold. The risk threshold, risk concentration threshold, and risk concentration threshold can be obtained through any of the methods described above.
[0092] In one possible implementation, performing a risk screening action on the first entity to be screened includes: querying video information of the first entity to be screened when processing the leaked express delivery waybill, to determine whether the processing operation of the first entity to be screened complies with preset operation rules. In this embodiment of the application, performing a risk screening action on a high-risk entity is used to determine whether the high-risk entity is involved in leaking express delivery waybill information.
[0093] The beneficial effects of this application are: in the process of investigating the source of leakage of express waybill information, the entities that may need to be investigated can be pre-screened, improving investigation efficiency and reducing investigation costs. It also allows for the pre-sorting of entities to be investigated for reference during subsequent risk investigation actions.
[0094] like Figure 7As shown in the figure, this application embodiment provides a device for investigating the leakage source of express delivery waybill information. The device includes: an acquisition module 701, a judgment module 702, and an execution module 703. The acquisition module 701 acquires the subject to be investigated, including a first subject to be investigated, which is the subject involved in the entire process cycle of the leaked express delivery waybill, and at least one subject is involved in the entire process cycle of any leaked express delivery waybill; acquires the risk concentration of the first subject to be investigated; acquires the risk concentration of the first subject to be investigated; acquires the first risk value of the first subject to be investigated, which is determined based on one or both of risk concentration and risk concentration. The judgment module 702 judges whether the first risk value is greater than or equal to a risk threshold. The execution module 703, when the first risk value is greater than or equal to the risk threshold, determines the first subject to be investigated as a high leakage risk subject, and performs a risk investigation operation on the first subject to be investigated.
[0095] In one possible implementation, the acquisition module 701 includes a concentration acquisition unit; the concentration acquisition unit acquires a risk factor value, the risk factor value being determined by the number of express delivery waybills involved in the first subject to be investigated among the leaked express delivery waybills; the risk concentration is configured as the ratio of the risk factor value to the number of leaked express delivery waybills.
[0096] In one possible implementation, the acquisition module 701 includes a concentration acquisition unit; the concentration acquisition unit acquires a risk factor value, the risk factor value being determined by the number of express delivery waybills involving the first subject to be investigated among all leaked express delivery waybills; acquires the workload of the first subject to be investigated within a preset time period, the workload being the number of express delivery waybills processed by the first subject to be investigated within the preset time period; the risk concentration is configured as the ratio of the risk factor value to the workload.
[0097] In one possible implementation, the acquisition module 701 includes a risk value acquisition unit; the risk value acquisition unit acquires a first risk value of the first subject to be investigated; the risk value acquisition unit includes a first risk value acquisition subunit and a second risk value acquisition subunit.
[0098] The first risk value acquisition subunit acquires the risk concentration ranking number of the first subject to be investigated. The risk concentration ranking number is used to determine the first risk value. The subjects to be investigated are sorted in descending order of risk concentration value to obtain the risk concentration ranking number of the first subject to be investigated.
[0099] The second risk value acquisition subunit acquires the risk concentration ranking number of the first subject to be investigated. The risk concentration ranking number is used to determine the first risk value. The subjects to be investigated are sorted in descending order of risk concentration value to obtain the risk concentration ranking number of the first subject to be investigated.
[0100] In one possible implementation, the judgment module 702 includes a sorting judgment unit; the sorting judgment unit determines whether a first risk value is greater than or equal to a risk threshold; the sorting judgment unit includes a first sorting judgment subunit and a second sorting judgment subunit; the first sorting judgment subunit determines that the risk concentration ranking number of the first subject to be investigated is greater than or equal to the preset risk concentration ranking threshold when the risk threshold is a preset risk concentration ranking threshold; the second sorting judgment subunit determines that the risk concentration ranking number of the first subject to be investigated is greater than or equal to the preset risk concentration ranking threshold when the risk threshold is a preset risk concentration ranking threshold.
[0101] like Figure 8 As shown, in one possible implementation, the device further includes a confirmation module 704; the confirmation module 704 determines that the first subject to be investigated is a high-leakage-risk subject; the confirmation module 704 includes a first confirmation unit and a second confirmation unit; the first confirmation unit determines that the risk concentration of the first subject to be investigated is greater than or equal to a preset risk concentration threshold; wherein, the first risk value is configured as the risk concentration of the first subject to be investigated, and the risk threshold is configured as the preset risk concentration threshold; the second confirmation unit determines that the risk concentration of the first subject to be investigated is greater than or equal to a preset risk concentration threshold; wherein, the first risk value is configured as the risk concentration of the first subject to be investigated, and the risk threshold is configured as the preset risk concentration threshold.
[0102] In one possible implementation, the processing time of any of the leaked express waybills is within a preset time period, which is used to determine the entire process cycle of the express waybill.
[0103] In one possible implementation, the execution module includes a first execution unit; the first execution unit queries video information of the first subject to be investigated when processing the leaked express waybill, in order to determine whether the processing operation of the first subject to be investigated complies with preset operation rules.
[0104] It should be noted that the above embodiments of the apparatus are only illustrated by the division of the above functional modules. In practical applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above. In addition, the apparatus and method embodiments provided in the above embodiments belong to the same concept, and the specific implementation process can be found in the method embodiments, which will not be repeated here.
[0105] Please see Figure 9 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application. Figure 9As shown, the electronic device 900 may include: at least one processor 901, at least one network interface 904, a user interface 903, a memory 905, and at least one communication bus 902.
[0106] The communication bus 902 is used to enable communication between these components.
[0107] The user interface 903 may include a display screen and a camera. Optionally, the user interface 903 may also include a standard wired interface and a wireless interface.
[0108] The network interface 904 may optionally include a standard wired interface or a wireless interface (such as a Wi-Fi interface).
[0109] The processor 901 may include one or more processing cores. The processor 901 connects to various parts of the server using various interfaces and lines, and performs various server functions and processes data by running or executing instructions, programs, code sets, or instruction sets stored in the memory 905, and by calling data stored in the memory 905. Optionally, the processor 901 may be implemented using at least one hardware form of Digital Signal Processing (DSP), Field-Programmable Gate Array (FPGA), or Programmable Logic Array (PLA). The processor 901 may integrate one or a combination of several of the following: Central Processing Unit (CPU), Graphics Processing Unit (GPU), and modem. The CPU primarily handles the operating system, user interface, and applications; the GPU is responsible for rendering and drawing the content to be displayed on the screen; and the modem handles wireless communication. It is understood that the modem may also not be integrated into the processor 901 and may be implemented as a separate chip.
[0110] The memory 905 may include random access memory (RAM) or read-only memory. Optionally, the memory 905 may include a non-transitory computer-readable storage medium. The memory 905 can be used to store instructions, programs, code, code sets, or instruction sets. The memory 905 may include a program storage area and a data storage area, wherein the program storage area may store instructions for implementing an operating system, instructions for at least one function (such as touch function, sound playback function, image playback function, etc.), instructions for implementing the above-described method embodiments, etc.; the data storage area may store data involved in the above-described method embodiments, etc. Optionally, the memory 905 may also be at least one storage device located remotely from the aforementioned processor 901. Figure 9 As shown, the memory 905, which serves as a computer storage medium, may include an operating system, a network communication module, a user interface module, and an application program for investigating the source of leakage of express waybill information.
[0111] exist Figure 9 In the electronic device 900 shown, the user interface 903 is mainly used to provide an input interface for the user and to obtain the user input data; while the processor 901 can be used to call an application program stored in the memory 905 that stores a method for investigating the leakage source of express waybill information. When executed by one or more processors, the electronic device performs one or more of the methods described in the above embodiments.
[0112] An electronic device readable storage medium stores instructions that, when executed by one or more processors, cause the electronic device to perform one or more of the methods described in the above embodiments.
[0113] It should be noted that, for the sake of simplicity, the foregoing method embodiments are all described as a series of actions. However, those skilled in the art should understand that this application is not limited to the described order of actions, as some steps may be performed in other orders or simultaneously according to this application. Furthermore, those skilled in the art should also understand that the embodiments described in the specification are preferred embodiments, and the actions and modules involved are not necessarily essential to this application.
[0114] In the above embodiments, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions in other embodiments.
[0115] In the several embodiments provided in this application, it should be understood that the disclosed apparatus can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual couplings, direct couplings, or communication connections may be through some service interfaces; indirect couplings or communication connections between devices or units may be electrical or other forms.
[0116] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.
[0117] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.
[0118] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage device (CMD). Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a memory and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned memory includes various media capable of storing program code, such as USB flash drives, portable hard drives, magnetic disks, or optical disks.
[0119] The above description is merely an exemplary embodiment of this disclosure and should not be construed as limiting the scope of this disclosure. Any equivalent changes and modifications made in accordance with the teachings of this disclosure shall still fall within the scope of this disclosure. Those skilled in the art will readily conceive of other embodiments of this disclosure upon considering the specification and the disclosure of practical truths. This application is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not described in this disclosure.
Claims
1. A method for investigating the source of leakage of express waybill information, applied to an express waybill management platform, characterized in that, The method includes: Obtain the entities to be investigated, including a first entity to be investigated, which is the entity involved in the entire process cycle of the leaked express waybill, and at least one entity is involved in the entire process cycle of any leaked express waybill; obtain the risk concentration of the first entity to be investigated; Obtain the risk concentration of the first subject to be investigated; Obtain the first risk value of the first subject to be investigated, wherein the first risk value is determined based on one or both of risk concentration and risk concentration. Determine whether the first risk value is greater than or equal to the risk threshold; When the first risk value is greater than or equal to the risk threshold, the first subject to be investigated is determined to be a subject with high leakage risk, and a risk investigation operation is performed on the first subject to be investigated. The process of obtaining the risk concentration of the first subject to be investigated specifically includes: obtaining a risk factor value, wherein the risk factor value is determined by the number of express delivery waybills involving the first subject to be investigated in the leaked express delivery waybills; the risk concentration is configured as the ratio of the risk factor value to the number of leaked express delivery waybills. The step of obtaining the risk concentration of the first subject to be investigated based on the risk concentration specifically includes: obtaining a risk factor value, wherein the risk factor value is determined by the number of express delivery waybills involving the first subject to be investigated among all the leaked express delivery waybills; obtaining the workload of the first subject to be investigated within a preset time period, wherein the workload is the number of express delivery waybills processed by the first subject to be investigated within the preset time period; and configuring the risk concentration as the ratio of the risk factor value to the workload.
2. The method according to claim 1, characterized in that, The method for obtaining the first risk value of the first subject to be investigated specifically includes any of the following methods: Obtain the risk concentration ranking number of the first subject to be investigated, and the risk concentration ranking number is used to determine the first risk value; wherein, the subjects to be investigated are sorted in descending order of the risk concentration values to obtain the risk concentration ranking number of the first subject to be investigated. Obtain the risk concentration ranking number of the first subject to be investigated, which is used to determine the first risk value; wherein the subjects to be investigated are sorted in descending order of the risk concentration values to obtain the risk concentration ranking number of the first subject to be investigated.
3. The method according to claim 2, characterized in that, The method for determining whether the first risk value is greater than or equal to the risk threshold includes any of the following methods: When the risk threshold is a preset risk concentration ranking threshold, it is determined that the risk concentration ranking number of the first subject to be investigated is greater than or equal to the preset risk concentration ranking threshold. When the risk threshold is a preset risk concentration sorting threshold, it is determined that the risk concentration sorting number of the first subject to be investigated is greater than or equal to the preset risk concentration sorting threshold.
4. The method according to claim 1, characterized in that, The method for determining the first entity to be investigated as a high-risk entity for leakage includes any of the following methods: The risk concentration of the first subject to be investigated is determined to be greater than or equal to a preset risk concentration threshold; wherein, the first risk value is configured as the risk concentration of the first subject to be investigated, and the risk threshold is configured as the preset risk concentration threshold; The risk concentration of the first subject to be investigated is determined to be greater than or equal to a preset risk concentration threshold; wherein, the first risk value is configured as the risk concentration of the first subject to be investigated, and the risk threshold is configured as the preset risk concentration threshold.
5. The method according to claim 1, characterized in that, The processing time period for any of the leaked express waybills is within the preset time period, which is used to determine the entire process cycle of the express waybill.
6. The method according to claim 1, characterized in that, The first risk value of the entity to be investigated is determined by the following formula: A = C%A1 + B%A2, C% + B% = 1; where A is the first risk value; A1 is the risk concentration; A2 is the risk concentration; C% is the percentage weight of risk concentration; and B% is the percentage weight of risk concentration. The risk threshold is determined by the following formula: Q=C%Q1+B%Q2, C%+B%=1; Where Q is the risk threshold; Q1 is the risk concentration threshold; and Q2 is the risk concentration threshold.
7. A device for investigating the leakage source of express delivery waybill information, the device being an express delivery waybill management platform, the express delivery waybill management platform including an acquisition module, a judgment module, and an execution module; The acquisition module acquires the entities to be investigated, including a first entity to be investigated, which is the entity involved in the entire process cycle of the leaked express waybill, and at least one entity is involved in the entire process cycle of any leaked express waybill; and acquires the risk concentration of the first entity to be investigated. Obtain the risk concentration of the first subject to be investigated; Obtain the first risk value of the first subject to be investigated, wherein the first risk value is determined based on one or both of risk concentration and risk concentration. The judgment module determines whether the first risk value is greater than or equal to the risk threshold. When the first risk value is greater than or equal to the risk threshold, the execution module determines that the first subject to be investigated is a subject with a high risk of leakage and performs a risk investigation operation on the first subject to be investigated. The acquisition module includes a concentration acquisition unit; the concentration acquisition unit acquires a risk factor value, the risk factor value being determined by the number of express delivery waybills involving the first entity to be investigated among the leaked express delivery waybills; the risk concentration is configured as the ratio of the risk factor value to the number of leaked express delivery waybills; The acquisition module includes a concentration acquisition unit; the concentration acquisition unit acquires the risk factor value, the risk factor value being determined by the number of express delivery waybills involving the first subject to investigation among all the leaked express delivery waybills; acquires the workload of the first subject to investigation within a preset time period, the workload being the number of express delivery waybills processed by the first subject to investigation within the preset time period; the risk concentration is configured as the ratio of the risk factor value to the workload.
8. An electronic device, characterized in that, The device includes a processor, a memory, a user interface, and a network interface. The memory is used to store instructions, the user interface and the network interface are used to communicate with other devices, and the processor is used to execute the instructions stored in the memory to cause the electronic device to perform the method as described in any one of claims 1-6.