A fund depository customer information security management system

Abstract

The present invention relates to the field of security information, and discloses a fund custody customer information security management system. The system comprises an information data monitoring module, a customer information storage and management module, an information data processing module, an information security risk assessment module, a security risk identification module, a security risk monitoring module and a security response module. The customer information security data is obtained through a data acquisition tool, and then the data is stored, backed up and managed. By processing and analyzing the customer information security data, an information security comprehensive risk assessment coefficient is calculated, a security risk assessment is performed on the customer information, and security risks and customers with security risks are identified. At the same time, security events are monitored and recorded, security risk problems are discovered in a timely manner, and then a security response is performed, which is conducive to making the monitoring and management of security risks more comprehensive and accurate, greatly improving the accuracy of security risk detection results, and reducing the situation of false detection and missed detection of security risks.

Description

Technical Field

[0001] The present invention relates to the field of secure information technology, and more specifically to a fund depository customer information security management system. Background Art

[0002] With the rapid development of Internet finance, fund custody has become a very important link for financial institutions and enterprises. In the traditional fund custody process, there are many security risks and hidden dangers. The fund custody customer information security management system can ensure the security of customers' funds and personal information during the custody process through encryption technology, identity authentication, access control and other means. At the same time, real-time monitoring and early warning functions are also required to timely discover and prevent potential security risks;

[0003] However, the above process still has the following disadvantages:

[0004] First, the fund custody customer information security management system only monitors various customer information security data, which makes the information security management relatively simple and the monitoring of security risks is not comprehensive and accurate enough;

[0005] Second, there is a lack of intelligent analysis process for the assessment of customer information security. There is a lack of intelligent identification function and automated positioning for detected customer information security risks, which may lead to large errors in the detection of security risks. Summary of the invention

[0006] In order to overcome the above-mentioned defects of the prior art, the present invention provides a fund deposit customer information security management system to solve the problems existing in the above-mentioned background technology.

[0007] The present invention provides the following technical solution: a fund depository customer information security management system, comprising:

[0008] Information data monitoring module: used to obtain data related to customer information security management through data collection tools, mainly including manual input collection unit, automatic collection unit and data interface integrated collection unit, and transmit the collected customer information security data to the customer information storage and management module;

[0009] Customer information storage and management module: used to store the collected customer information security data in the database, regularly back up the collected customer information security data, and uniformly manage, query and access it through the database;

[0010] Information data processing module: used to process the collected customer information security data, obtain the data leakage risk index, unauthorized access risk index, supply chain risk index, data processing error risk index, social engineering risk index and shared data security risk index, and transmit the processed customer information security data to the information data analysis module;

[0011] Information security risk assessment module: used to receive processed customer information security data, conduct specific analysis on the processed customer information security data, obtain the information security comprehensive risk assessment coefficient, and conduct security risk assessment on customer information through the information security comprehensive risk assessment coefficient;

[0012] Security risk identification module: It is used to identify the existing information security risk sources using the calculated information security comprehensive risk assessment coefficient, target customers with security risks, and transmit the identified security risk sources to the security response module;

[0013] Security risk monitoring module: used to monitor and record security events in the system in real time, promptly identify customers with security risks, and transmit the detected security risk customers to the security response module;

[0014] Security response module: used to formulate corresponding response plans and measures based on the received security risk sources and security risk customers.

[0015] Preferably, the specific collection method of the information data collection module is:

[0016] Manual input collection unit: obtains and monitors basic personal information of customers by manually inputting customer information, including name, ID number and telephone number;

[0017] Automated collection unit: Automatically collects customer information from various data sources through web crawler technology, and monitors the specific situation of customer information in real time;

[0018] Data interface integrated acquisition unit: through interfacing with other systems, it can realize real-time data sharing, real-time monitoring and acquisition of customer information.

[0019] Preferably, the customer information storage and management module stores the collected customer information security data in a database, manages and accesses it through a database management system, and sets up a corresponding access control mechanism and permission management mechanism to restrict unauthorized access and ensure that only authorized personnel can access and process customer information.

[0020] Preferably, the information data processing module obtains various risk indexes affecting customer information security by processing and calculating customer information security data;

[0021] The data leakage risk index is a quantitative indicator to measure the risk of data leakage in an organization. The specific calculation formula is: n represents the total number of individual customers, j represents the jth individual customer, ε represents the probability that the information sent by the customer is intercepted by an external attacker, and 0<ε<1, and p represents the probability of each service provider i being selected;

[0022] The unauthorized access risk index is appropriately adjusted according to the specific data monitoring situation. The specific calculation formula is unauthorized access risk index U=V×L×(D+R), where V represents the probability of vulnerability exploitation, L represents the probability of loss impact caused, D represents the time when the vulnerability is discovered, and R represents the time required to repair the vulnerability;

[0023] The supply chain risk index is used to evaluate the risk that may be caused by the flow of customer information in the supply chain in the fund custody business. The specific calculation formula is: y1 represents information sensitivity, y2 represents supply chain complexity, y3 represents the degree of security measure defects, x1 represents the effectiveness of security measures, and x2 represents the coverage of security measures;

[0024] The data processing error risk index is used to evaluate the risk level of errors that may occur during data processing. The specific calculation formula is: Data processing error risk index z1 represents the number of errors within a certain period of time, z2 represents the probability of an error occurring in a certain data processing operation, z3 represents the degree of error impact, and z4 represents the success rate of data processing within a certain period of time;

[0025] The social engineering risk index is an indicator used to evaluate the potential risk level of stealing customer information through social engineering means. The specific calculation formula is social engineering risk index C = (I1+I2+I3)×W1+(A1+A2+A3)×W2, where I1 represents the employee vigilance score, I2 represents the information security awareness score, I3 represents the physical security measures score, A1 represents the skill level of the attacker, A2 represents the complexity score of the attack method, and A3 represents the potential impact score of a successful attack. W1 represents the weight of each independent risk factor score, and W2 represents the weight of the social engineering attack score.

[0026] The shared data security risk index is used to evaluate the security risks that may occur during the data sharing process. The specific calculation formula is: h1 represents the data sensitivity score, h2 represents the data access control score, h3 represents the data transmission security score, h4 represents the data storage security score, f represents the shared data security impact factor, a1 represents the data sensitivity score weight, a2 represents the data access control score weight, a3 represents the data transmission security score weight, and a4 represents the data storage security score weight.

[0027] Preferably, the specific calculation formula of the information security comprehensive evaluation coefficient is: P represents the data leakage risk index, U represents the unauthorized access risk index, S represents the supply chain risk index, Z represents the data processing error risk index, C represents the social engineering risk index, H represents the shared data security risk index, b1 represents the proportion of the unauthorized access risk index, b2 represents the proportion of the supply chain risk index, b3 represents the proportion of the data processing error risk index, b4 represents the proportion of the social engineering risk index, b5 represents the proportion of the shared data security risk index, and m represents a constant.

[0028] Preferably, the security risk identification module compares the calculated information security comprehensive risk assessment coefficient with a preset information security threshold. If the information security comprehensive risk assessment coefficient α is less than or equal to the preset information security threshold, It means that there is no abnormal information security situation. If the comprehensive information security risk assessment coefficient α is greater than the preset information security threshold It indicates that there is an information security risk, and the customers with target security risks are located in combination with the data leakage risk index.

[0029] Preferably, the security risk monitoring module records various events with security risks based on the results identified by the security risk identification module, saves them in a database, and detects customers with security risks.

[0030] Preferably, the security response module initiates an emergency response process and executes pre-defined measures when a security risk event occurs.

[0031] Technical effects and advantages of the present invention:

[0032] The present invention is provided with an information data monitoring module to obtain data related to customer information security management through a data collection tool, stores customer information security data through a customer information storage and management module, and performs regular backup and management, processes the collected customer information security data through an information data processing module, performs specific analysis on the processed customer information security data through an information security risk assessment module, obtains an information security comprehensive risk assessment coefficient, performs security risk assessment on customer information, identifies existing information security risk sources through a security risk identification module, and targets customers with security risks, monitors and records security events in the system in real time through a security risk monitoring module, promptly discovers customers with security risks, and formulates corresponding response plans and measures based on the security risk sources and security risk customers received through a security response module, which is conducive to solving the problem of single customer information security data management, making the monitoring and management of security risks more comprehensive and accurate, making the detected security risk problems more accurate and reliable through an intelligent assessment process, and automatically identifying and locating security risks, greatly improving the accuracy of security risk detection results, and reducing the situation of false detection and missed detection of security risks. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1 The present invention is a flow chart of a fund custody customer information security management system. DETAILED DESCRIPTION

[0034] The technical solution of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the present invention. In addition, the forms of the various structures recorded in the following embodiments are merely illustrative. The fund custody customer information security management system involved in the present invention is not limited to the various structures recorded in the following embodiments. All other implementations obtained by ordinary technicians in this field without making creative work belong to the scope of protection of the present invention.

[0035] The present invention provides a fund depository customer information security management system, comprising:

[0036] Information data monitoring module: used to obtain data related to customer information security management through data collection tools, mainly including manual input collection unit, automatic collection unit and data interface integrated collection unit, and transmit the collected customer information security data to the customer information storage and management module.

[0037] In this embodiment, the specific collection method of the information data collection module is:

[0038] Manual input collection unit: obtains and monitors basic personal information of customers by manually inputting customer information, including name, ID number and telephone number;

[0039] Automated collection unit: Automatically collects customer information from various data sources through web crawler technology, and monitors the specific situation of customer information in real time;

[0040] Data interface integrated acquisition unit: through interfacing with other systems, it can realize real-time data sharing, real-time monitoring and acquisition of customer information.

[0041] It should be specifically noted that the collection of data through the information data monitoring module can reduce errors in manual operations, improve data accuracy and consistency, realize automated data collection, save a lot of time and labor costs, and monitor data changes and abnormal situations in real time, and issue early warnings in a timely manner so that appropriate measures can be taken in a timely manner.

[0042] Customer information storage and management module: used to store the collected customer information security data in the database, and regularly back up the collected customer information security data, and uniformly manage, query and access it through the database.

[0043] In this embodiment, the customer information storage and management module stores the collected customer information security data in the database, manages and accesses it through the database management system, and sets up corresponding access control mechanism and permission management mechanism to limit unauthorized access and ensure that only authorized personnel can access and process customer information.

[0044] It should be specifically noted that by establishing a customer information storage and management module and a permission management mechanism, permissions are divided for different users, their access to customer information is restricted, and the security of information is ensured. At the same time, convenient information management and query functions are provided, which can quickly find and manage customer information and improve work efficiency and accuracy.

[0045] Information data processing module: used to process the collected customer information security data to obtain data leakage risk index, unauthorized access risk index, supply chain risk index, data processing error risk index, social engineering risk index and shared data security risk index, and transmit the processed customer information security data to the information data analysis module.

[0046] In this embodiment, the information data processing module obtains various risk indexes that affect customer information security by processing and calculating customer information security data;

[0047] The data leakage risk index is a quantitative indicator to measure the risk of data leakage in an organization. The specific calculation formula is: n represents the total number of individual customers, j represents the jth individual customer, ε represents the probability that the information sent by the customer is intercepted by an external attacker, and 0<ε<1, and p represents the probability of each service provider i being selected;

[0048] The unauthorized access risk index is appropriately adjusted according to the specific data monitoring situation. The specific calculation formula is unauthorized access risk index U=V×L×(D+R), where V represents the probability of vulnerability exploitation, L represents the probability of loss impact caused, D represents the time when the vulnerability is discovered, and R represents the time required to repair the vulnerability;

[0049] Further: the probability of vulnerability exploitation V, the probability of loss impact caused L, the time when the vulnerability is discovered D, and the time required to repair the vulnerability R are calculated and analyzed using existing technologies;

[0050] The supply chain risk index is used to evaluate the risk that may be caused by the flow of customer information in the supply chain in the fund custody business. The specific calculation formula is: y1 represents information sensitivity, y2 represents supply chain complexity, y3 represents the degree of security measure defects, x1 represents the effectiveness of security measures, and x2 represents the coverage of security measures;

[0051] The data processing error risk index is used to evaluate the risk level of errors that may occur during data processing. The specific calculation formula is: Data processing error risk index z1 represents the number of errors within a certain period of time, z2 represents the probability of an error occurring in a certain data processing operation, z3 represents the degree of error impact, and z4 represents the success rate of data processing within a certain period of time;

[0052] The social engineering risk index is an indicator used to evaluate the potential risk level of stealing customer information through social engineering means. The specific calculation formula is social engineering risk index C = (I1+I2+I3)×W1+(A1+A2+A3)×W2, where I1 represents the employee vigilance score, I2 represents the information security awareness score, I3 represents the physical security measures score, A1 represents the skill level of the attacker, A2 represents the complexity score of the attack method, and A3 represents the potential impact score of a successful attack. W1 represents the weight of each independent risk factor score, and W2 represents the weight of the social engineering attack score.

[0053] The shared data security risk index is used to evaluate the security risks that may occur during the data sharing process. The specific calculation formula is: h1 represents the data sensitivity score, h2 represents the data access control score, h3 represents the data transmission security score, h4 represents the data storage security score, f represents the shared data security impact factor, a1 represents the data sensitivity score weight, a2 represents the data access control score weight, a3 represents the data transmission security score weight, and a4 represents the data storage security score weight.

[0054] It should be specifically noted that the data processing module adopts an automated processing flow to improve data processing efficiency, reduce errors and delays caused by human intervention, improve the accuracy of data analysis, and reduce the time of data analysis.

[0055] Information security risk assessment module: used to receive processed customer information security data, conduct specific analysis on the processed customer information security data, obtain the information security comprehensive risk assessment coefficient, and conduct security risk assessment on customer information through the information security comprehensive risk assessment coefficient.

[0056] In this embodiment, the specific calculation formula of the information security comprehensive evaluation coefficient is: P represents the data leakage risk index, U represents the unauthorized access risk index, S represents the supply chain risk index, Z represents the data processing error risk index, C represents the social engineering risk index, H represents the shared data security risk index, b1 represents the proportion of the unauthorized access risk index, b2 represents the proportion of the supply chain risk index, b3 represents the proportion of the data processing error risk index, b4 represents the proportion of the social engineering risk index, b5 represents the proportion of the shared data security risk index, and m represents a constant.

[0057] It should be specifically noted that by conducting regular risk assessments of the system, possible security loopholes and risk points can be discovered in a timely manner, and corresponding preventive measures can be taken to avoid information leaks and security accidents. At the same time, customer trust in fund custody services can be enhanced and customer satisfaction can be improved.

[0058] Security risk identification module: It is used to calculate the comprehensive information security risk assessment coefficient to identify the existing information security risk sources, target customers with security risks, and transmit the identified security risk sources to the security response module.

[0059] In this embodiment, the security risk identification module compares the calculated information security comprehensive risk assessment coefficient with the preset information security threshold. If the information security comprehensive risk assessment coefficient α is less than or equal to the preset information security threshold, It means that there is no abnormal information security situation. If the comprehensive information security risk assessment coefficient α is greater than the preset information security threshold It indicates that there is an information security risk, and the customers with target security risks are located in combination with the data leakage risk index.

[0060] It should be specifically noted that the security risk identification module can monitor abnormal behaviors and potential security threats in the fund custody process in real time, detect suspicious activities in a timely manner, and identify potential security risks and operational risks.

[0061] Security risk monitoring module: used to monitor and record security events in the system in real time, promptly identify customers with security risks, and transmit the detected security risk customers to the security response module.

[0062] In this embodiment, the security risk monitoring module records various events with security risks based on the results identified by the security risk identification module, saves them in a database, and detects customers with security risks.

[0063] It should be specifically noted that through real-time monitoring and analysis, the security monitoring module can promptly detect abnormal behavior or potential security threats. Once a security incident is detected, the system can respond quickly and immediately initiate an emergency plan to minimize losses and impacts.

[0064] Security response module: used to formulate corresponding response plans and measures based on the received security risk sources and security risk customers.

[0065] In this embodiment, the security response module starts the emergency response process and executes pre-defined measures when a security risk event occurs.

[0066] Finally: The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

[0067] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A fund depository customer information security management system, characterized by: include: Information data monitoring module: used to obtain data related to customer information security management through data collection tools, mainly including manual input collection unit, automatic collection unit and data interface integrated collection unit, and transmit the collected customer information security data to the customer information storage and management module; Customer information storage and management module: used to store the collected customer information security data in the database, regularly back up the collected customer information security data, and uniformly manage, query and access it through the database; Information data processing module: used to process the collected customer information security data, obtain the data leakage risk index, unauthorized access risk index, supply chain risk index, data processing error risk index, social engineering risk index and shared data security risk index, and transmit the processed customer information security data to the information data analysis module; The information data processing module obtains various risk indexes that affect customer information security by processing and calculating customer information security data; The data leakage risk index is a quantitative indicator to measure the risk of data leakage in an organization. The specific calculation formula is: n represents the total number of individual customers, j represents the jth individual customer, ε represents the probability that the information sent by the customer is intercepted by an external attacker, and 0<ε<1, and p represents the probability of each service provider i being selected; The unauthorized access risk index is appropriately adjusted according to the specific data monitoring situation. The specific calculation formula is unauthorized access risk index U=V×L×(D+R), where V represents the probability of vulnerability exploitation, L represents the probability of loss impact caused, D represents the time when the vulnerability is discovered, and R represents the time required to repair the vulnerability; The supply chain risk index is used to evaluate the risk that may be caused by the flow of customer information in the supply chain in the fund custody business. The specific calculation formula is: y1 represents information sensitivity, y2 represents supply chain complexity, y3 represents the degree of security measure defects, x1 represents the effectiveness of security measures, and x2 represents the coverage of security measures; The data processing error risk index is used to evaluate the risk level of errors that may occur during data processing. The specific calculation formula is: Data processing error risk index z1 represents the number of errors within a certain period of time, z2 represents the probability of an error occurring in a certain data processing operation, z3 represents the degree of error impact, and z4 represents the success rate of data processing within a certain period of time; The social engineering risk index is an indicator used to evaluate the potential risk level of stealing customer information through social engineering means. The specific calculation formula is social engineering risk index C = (I1+I2+I3)×W1+(A1+A2+A3)×W2, where I1 represents the employee vigilance score, I2 represents the information security awareness score, I3 represents the physical security measures score, A1 represents the skill level of the attacker, A2 represents the complexity score of the attack method, and A3 represents the potential impact score of a successful attack. W1 represents the weight of each independent risk factor score, and W2 represents the weight of the social engineering attack score. The shared data security risk index is used to evaluate the security risks that may occur during the data sharing process. The specific calculation formula is: h1 represents the data sensitivity score, h2 represents the data access control score, h3 represents the data transmission security score, h4 represents the data storage security score, f represents the shared data security impact factor, a1 represents the data sensitivity score weight, a2 represents the data access control score weight, a3 represents the data transmission security score weight, and a4 represents the data storage security score weight; Information security risk assessment module: used to receive processed customer information security data, conduct specific analysis on the processed customer information security data, obtain the information security comprehensive risk assessment coefficient, and conduct security risk assessment on customer information through the information security comprehensive risk assessment coefficient; The specific calculation formula of the information security comprehensive evaluation coefficient is: P represents the data leakage risk index, U represents the unauthorized access risk index, S represents the supply chain risk index, Z represents the data processing error risk index, C represents the social engineering risk index, H represents the shared data security risk index, b1 represents the proportion of the unauthorized access risk index, b2 represents the proportion of the supply chain risk index, b3 represents the proportion of the data processing error risk index, b4 represents the proportion of the social engineering risk index, b5 represents the proportion of the shared data security risk index, and m represents a constant; Security risk identification module: It is used to identify the existing information security risk sources using the calculated information security comprehensive risk assessment coefficient, target customers with security risks, and transmit the identified security risk sources to the security response module; The security risk identification module compares the calculated information security comprehensive risk assessment coefficient with the preset information security threshold. If the information security comprehensive risk assessment coefficient α is less than or equal to the preset information security threshold, It means that there is no abnormal information security situation. If the comprehensive information security risk assessment coefficient α is greater than the preset information security threshold Indicates that there is an information security risk, and locates the target customers with security risks based on the data leakage risk index; Security risk monitoring module: used to monitor and record security events in the system in real time, promptly identify customers with security risks, and transmit the detected security risk customers to the security response module; Security response module: used to formulate corresponding response plans and measures based on the received security risk sources and security risk customers.

2. A fund depository customer information security management system according to claim 1, characterized in that: The specific collection method of the information data monitoring module is: Manual input collection unit: obtains and monitors basic personal information of customers by manually inputting customer information, including name, ID number and telephone number; Automated collection unit: Automatically collect customer information from various data sources through web crawler technology, and monitor the specific situation of customer information in real time; Data interface integrated acquisition unit: through interfacing with other systems, it can realize real-time data sharing, real-time monitoring and acquisition of customer information.

3. A fund depository customer information security management system according to claim 1, characterized in that: The customer information storage and management module stores the collected customer information security data in the database, manages and accesses it through the database management system, and sets up corresponding access control mechanisms and permission management mechanisms to restrict unauthorized access and ensure that only authorized personnel can access and process customer information.

4. A fund depository customer information security management system according to claim 1, characterized in that: The security risk monitoring module records various events with security risks based on the results identified by the security risk identification module, saves them in a database, and detects customers with security risks.

5. A fund depository customer information security management system according to claim 1, characterized in that: The security response module starts the emergency response process and executes pre-defined measures when a security risk event occurs.

Images