A management method and system for e-commerce users
By identifying and aggregating the interactive content of e-commerce users, detecting sensitive information, establishing a data life cycle, and applying encryption protocols and machine learning algorithms, the problem of inconsistent standards in different channels and regions is solved, and the security management of e-commerce user data is realized and Protect.
Patent Information
- Application Number
- CN202410945665.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-07-15
- Publication Date
- 2024-12-31
- Estimated Expiration
- 2044-07-15
AI Technical Summary
Different channels and regions have inconsistent definitions of e-commerce industry standards, which makes it difficult for e-commerce customer service to establish an effective data governance framework and cannot effectively manage and protect the sensitive information of e-commerce users.
By identifying and aggregating interactive content received by various channels, generating priority queues, detecting sensitive information, establishing data life cycles, applying encryption protocols and machine learning algorithms, restricting access rights, setting data transfer rules, and ensuring that data is in transmission and storage processes security and compliance.
It has realized unified data management standards for different channels and regions, ensured that data processing and storage comply with industry standards and protection rules in various regions, and enhanced data security and user trust.
Smart Images

Figure CN118505235B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of data processing, and in particular to a management method and system for e-commerce users. Background Art
[0002] The management and scheduling of e-commerce customer service is crucial in multi-channel customer service management. It involves how to effectively allocate and manage customer service resources to meet customer needs in different channels and regions. When processing the data of e-commerce users who frequently cross regions, it is difficult for e-commerce customer service to ensure that the data is managed in accordance with local industry standards after crossing regions. Because different channels and regions have different definitions of e-commerce industry standards, e-commerce customer service is unable to establish an effective data governance framework for e-commerce users when processing sensitive information. Summary of the invention
[0003] The present invention aims to solve the problem that e-commerce customer service cannot establish an effective data governance framework for e-commerce users when processing sensitive information because different channels and regions have different definitions of e-commerce industry standards, and to provide an e-commerce user management method and system.
[0004] The present invention adopts the following technical means to solve the technical problem:
[0005] The present invention provides a method for managing e-commerce users, comprising:
[0006] Identify interactive contents received by each preset channel, aggregate the interactive contents, and generate a priority queue of the interactive contents based on basic information input by the user through the preset channel, wherein the basic information specifically includes the type of interaction, waiting time, and region;
[0007] Determining whether preset sensitive information is detected in the interactive content;
[0008] If so, then obtain the user's permission settings for the interactive content based on the basic information, limit authorized access to the interactive content on the e-commerce platform based on the permission settings, collect access prerequisites for the interactive content set by the user on the e-commerce platform, establish a data lifecycle for the interactive content on the e-commerce platform, and generate a data governance framework for the interactive content within the data lifecycle;
[0009] Determine whether the data governance framework requires data transfer;
[0010] If necessary, identify and classify the sensitive information from the data governance framework, obtain the transfer terminal preset by the user on the e-commerce platform, apply the preset transmission encryption protocol to establish an encrypted connection for the data governance framework, generate a static key for the data governance framework, split the static key data and synchronize it to the e-commerce platform and the transfer terminal, identify the static key data collected by the user from the e-commerce platform and the transfer terminal, and grant the user access to the data governance framework on the transfer terminal in combination with the static key data.
[0011] Furthermore, the step of obtaining the user's permission setting for the interactive content according to the basic information and limiting authorized access to the interactive content on the e-commerce platform according to the permission setting includes:
[0012] Based on the permission level preset by the e-commerce platform, identify other users who request to access the interactive content, perform preset access verification on the other users through the e-commerce platform, and collect verification results;
[0013] Determining whether the verification result matches the permission level;
[0014] If so, obtain the behavioral data of the other users on the e-commerce platform, apply a preset machine learning algorithm to establish the behavioral patterns of the other users based on the behavioral data and the basic information of the other users, calculate the risk factors preset for the other users on the e-commerce platform based on the behavioral patterns, and generate the risk level corresponding to the other users' access to the interactive content, wherein the behavioral data specifically includes login time, access frequency, browsing history, purchase history, device information and IP address.
[0015] Furthermore, before the step of establishing the data life cycle of the interactive content on the e-commerce platform, the step further includes:
[0016] Based on the pre-built rule engine of the e-commerce platform, identifying the regional management settings corresponding to the interactive content from the basic information;
[0017] determining whether the regional management setting restricts the interactive content;
[0018] If so, the rule engine is applied to set keyword filtering rules according to the regional management settings, mark corresponding restricted keywords in the interactive content, intercept the interactive content based on the restricted keywords, generate interception information pushed by the e-commerce platform to the user, and block the interactive content in combination with the regional management settings and the interception information.
[0019] Furthermore, the step of applying the preset transmission encryption protocol to establish an encrypted connection for the data governance framework includes:
[0020] Based on the encryption validity preset by the user for the interactive content, the time granularity of the data governance framework is divided, and the current timestamp is introduced into the key generation process according to the time granularity, and the encryption key is generated by combining the timestamp with the preset hash parameter;
[0021] Determining whether the encryption key is decrypted within the encryption time limit;
[0022] If not, regenerate the second encryption key based on the encryption time limit, decentralize the encryption key as a backup key, and use the second encryption key as the master key, reset the encryption time limit to the second encryption time limit, and allow the master key and the backup key to be used together as the decryption content of the data governance framework within the second encryption time limit.
[0023] Furthermore, the step of determining whether preset sensitive information is detected in the interactive content further includes:
[0024] Collecting voice information output by the user from the interactive content, removing background noise from the voice information, dividing a long audio stream into a preset number of short audio segments, performing endpoint detection on the short audio segments, and generating corresponding audio features;
[0025] Determining whether the audio feature matches the sensitive information;
[0026] If so, the audio feature is marked as sensitive content, and preset shielding data is applied to obscure information access to the sensitive content. The user's privacy settings for the sensitive content on the e-commerce platform are collected, and the voice information is adjusted accordingly based on the privacy settings, wherein the shielding data specifically includes text shielding, audio muting, and overlay coverage.
[0027] Furthermore, the step of determining whether the data governance framework requires data transfer further includes:
[0028] Identifying the real-time region information of the user on the e-commerce platform;
[0029] Determining whether the real-time region information matches the regions pre-recorded by the e-commerce platform;
[0030] If so, the user's data privacy requirements are obtained based on the real-time regional information, and the data feasibility of the data governance framework at the transfer end is evaluated according to the industry standards pre-recorded by the e-commerce platform on the transfer end.
[0031] Furthermore, the step of identifying the interactive content received by each preset channel, aggregating the interactive content, and generating a priority queue of the interactive content based on basic information input by the user through the preset channel also includes:
[0032] Detecting the completeness of basic information items before the user interacts with the e-commerce platform;
[0033] Determine whether the complete item of the basic information matches the basic information;
[0034] If so, a queue code is constructed for the user to interact with the e-commerce customer service on the e-commerce platform, and an interactive service for the user is determined on the e-commerce platform based on the queue code.
[0035] The present invention also provides a management system for e-commerce users, including:
[0036] an identification module, used to identify interactive contents received by each preset channel, aggregate the interactive contents, and generate a priority queue of the interactive contents based on basic information input by the user through the preset channel, wherein the basic information specifically includes the type of interaction, waiting time, and region;
[0037] A determination module, used to determine whether preset sensitive information is detected in the interactive content;
[0038] an execution module, for, if yes, obtaining the permission setting of the user to the interactive content according to the basic information, limiting the authorized access to the interactive content on the e-commerce platform according to the permission setting, collecting the access prerequisites of the interactive content set by the user on the e-commerce platform, establishing the data life cycle of the interactive content on the e-commerce platform, and generating a data governance framework for the interactive content within the data life cycle;
[0039] A second judgment module is used to judge whether the data governance framework needs data transfer;
[0040] The second execution module is used to identify and classify the sensitive information from the data governance framework if necessary, obtain the transfer terminal preset by the user on the e-commerce platform, apply the preset transmission encryption protocol to establish an encrypted connection for the data governance framework, generate a static key for the data governance framework, split the static key data and synchronize it to the e-commerce platform and the transfer terminal, identify the static key data collected by the user from the e-commerce platform and the transfer terminal, and grant the user access rights to the data governance framework on the transfer terminal in combination with the static key data.
[0041] Furthermore, the execution module includes:
[0042] A collection unit, configured to identify other users who request to access the interactive content based on the permission level preset by the e-commerce platform, perform preset access verification on the other users through the e-commerce platform, and collect verification results;
[0043] A judging unit, used to judge whether the verification result matches the permission level;
[0044] an execution unit, for obtaining, if yes, the behavior data of the other users on the e-commerce platform, applying a preset machine learning algorithm to establish the behavior patterns of the other users based on the behavior data and the basic information of the other users, calculating the risk factors preset by the other users on the e-commerce platform based on the behavior patterns, and generating a risk level corresponding to the other users' access to the interactive content, wherein the behavior data specifically includes login time, access frequency, browsing history, purchase history, device information and IP address.
[0045] Furthermore, it also includes:
[0046] A second identification module, configured to identify, from the basic information, a regional management setting corresponding to the interactive content based on a rule engine pre-built by the e-commerce platform;
[0047] A third determination module is used to determine whether the regional management setting restricts the interactive content;
[0048] The third execution module is used to apply the rule engine to set keyword filtering rules according to the regional management settings, mark corresponding restriction keywords in the interactive content, intercept the interactive content based on the restriction keywords, generate interception information pushed by the e-commerce platform to the user, and block the interactive content in combination with the regional management settings and the interception information.
[0049] The present invention provides an e-commerce user management method and system, which has the following beneficial effects:
[0050] The present invention establishes a unified data classification and standardization system, including the definition and classification method of sensitive information, which can help e-commerce customer service personnel and managers maintain consistent processing standards for e-commerce users in different channels or regions. At the same time, according to the industry standards of different regions, corresponding data management strategies and processes are formulated, including data storage location, access permission control and data transfer rules to ensure the security of data after transfer. The use of encryption technology and security protocols can ensure that data processing and storage comply with the data protection rules and industry standards of the transfer area. BRIEF DESCRIPTION OF THE DRAWINGS
[0051] Figure 1A schematic diagram of a flow chart of an embodiment of a method for managing e-commerce users of the present invention;
[0052] Figure 2 A structural block diagram of an embodiment of a management system for e-commerce users of the present invention. DETAILED DESCRIPTION
[0053] It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention. The implementation of the objectives, functional features and advantages of the present invention will be further described in conjunction with the embodiments and with reference to the accompanying drawings.
[0054] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0055] Reference Figure 1 , is a method for managing e-commerce users in an embodiment of the present invention, comprising:
[0056] S1: Identify interactive contents received by various preset channels, aggregate the interactive contents, and generate a priority queue of the interactive contents based on basic information input by the user through the preset channels, wherein the basic information specifically includes the type of interaction, waiting time, and region;
[0057] S2: Determine whether preset sensitive information is detected in the interactive content;
[0058] S3: If so, then obtain the user's permission settings for the interactive content based on the basic information, limit authorized access to the interactive content on the e-commerce platform based on the permission settings, collect the access prerequisites for the interactive content set by the user on the e-commerce platform, establish the data life cycle of the interactive content on the e-commerce platform, and generate a data governance framework for the interactive content within the data life cycle;
[0059] S4: Determine whether the data governance framework requires data transfer;
[0060] S5: If necessary, identify and classify the sensitive information from the data governance framework, obtain the transfer terminal preset by the user on the e-commerce platform, apply the preset transmission encryption protocol to establish an encrypted connection for the data governance framework, generate a static key for the data governance framework, split the static key data and synchronize it to the e-commerce platform and the transfer terminal, identify the static key data collected by the user from the e-commerce platform and the transfer terminal, and grant the user access rights to the data governance framework on the transfer terminal in combination with the static key data.
[0061] In this embodiment, the system identifies the interactive content received by each pre-set channel of the e-commerce platform, aggregates the interactive content, and generates a priority queue for each user's interactive content based on the basic information input by the user through the pre-set channel before the interaction, the basic information specifically including the interaction type, waiting time and region, and then the system determines whether the pre-set sensitive format information is detected in the interactive content to execute the corresponding steps; for example, when the system determines that the interactive content of the e-commerce user does not detect the pre-set sensitive format information, the system will believe that the interactive content of the e-commerce user does not need to be protected by the e-commerce platform using confidentiality measures, and only needs When the data is transferred, it is sufficient to check whether it complies with the industry standards and data protection of the transfer area. The system will use predefined rules and algorithms to check the interactive content to ensure that it does not contain sensitive information. When the automated tool cannot fully confirm, manual review can be introduced to ensure that the interactive content does not contain sensitive information. At the same time, query and obtain the industry standards and data protection rules of the target area to ensure that all necessary compliance requirements are understood. An up-to-date rule database is maintained on the e-commerce platform, including the data protection requirements and industry standards of various regions, and the appropriate data transmission protocol is selected according to the rules of the target area to ensure data security during transmission; for example, when the system determines that the e-commerce platform When the interactive content of an e-commerce user detects pre-set sensitive format information, the system will consider that the interactive content of the e-commerce user needs to be protected privately by the e-commerce platform using confidentiality measures. The system will obtain the user's permission settings for the interactive content based on the e-commerce user's basic information, and restrict the interactive content from being accessed by other users on the e-commerce platform based on different permission settings. That is, access to these interactive contents requires the authorization of the e-commerce user, collect the prerequisites for the e-commerce user to access the interactive content from the e-commerce platform, establish a data life cycle for the private protection of the interactive content on the e-commerce platform, and generate a data governance framework for the interactive content within the data life cycle; the system automatically detects sensitive The system can detect sensitive information and trigger the protection mechanism, so that sensitive interactive content is encrypted during storage and transmission, ensuring that sensitive data will not be accessed by unauthorized users. At the same time, based on the basic information and permission settings of e-commerce users, the system can carefully control who can access interactive content, ensuring that only authorized users can view sensitive information, allowing users to set access permissions on the e-commerce platform by themselves, enhancing users' sense of control and trust in their own data, and dynamically adjusting the data governance framework and protection strategy according to the latest regional rule changes, so that the processing of interactive content complies with the privacy protection rules of various regions; then the system determines whether the data governance framework needs to transfer data to execute the corresponding steps;For example, when the system determines that the data governance framework for interactive content does not require data transfer, the system will deem that the e-commerce user does not need to transfer data across regions on the e-commerce platform. The system will ensure that the local storage of interactive content on the e-commerce platform adopts high-standard security measures, such as data encryption and access control. By selecting a storage location that meets security and compliance requirements, data storage in an insecure environment is avoided. At the same time, data is backed up regularly to ensure rapid recovery in the event of data damage or loss. Data is redundantly stored in multiple physical locations to prevent single point failures. Data access activities are monitored in real time, and access logs are recorded to ensure that every data access and operation can be traced. Unauthorized access behavior can be discovered and responded to in a timely manner by setting up an abnormal access detection mechanism. For example, when the system determines that the data governance framework for interactive content requires data transfer, the system will deem that the e-commerce user needs to transfer data across regions on the e-commerce platform. The system will identify and classify the corresponding sensitive information from the data governance framework, obtain the data transfer end region pre-set by the e-commerce user on the e-commerce platform, and apply the pre-set data transfer end region. The transmission encryption protocol set up first establishes an encrypted connection for the data governance framework, generates a static key for the data governance framework, splits the static key into data and synchronizes it to the e-commerce platform and the data transfer end area, identifies the static key data collected by the e-commerce user from the e-commerce platform and the data transfer end area, and combines the static key data in the e-commerce platform and the data transfer end area, so that the e-commerce user can obtain access rights to the data governance framework in the data transfer end area; the system uses the preset transmission encryption protocol to ensure the confidentiality and integrity of data transmission during data transfer, prevent data from being intercepted or tampered with during transmission, generate static keys and apply them to data encryption, so that even if the data is intercepted, it cannot be decrypted, further improving data security, and at the same time splits and synchronizes the static key to the e-commerce platform and the data transfer end area. It can only be decrypted when both endpoints have the key data. This method enhances the security of the key and prevents single-point theft. In addition, according to the data transfer end area pre-set by the e-commerce user, the system automatically adjusts the data governance framework and protection measures to ensure that the data meets local rules and requirements at the destination. ;
[0062] It should be noted that the specific examples of message aggregation of interactive content are as follows:
[0063] User Zhang San interacts with the e-commerce platform through the following channels:
[0064] Email: An email was sent to inquire about the order status;
[0065] Social media: Post a tweet on a social platform complaining about logistics delays and @ the official account of the e-commerce platform;
[0066] Instant Messaging: A message was sent through a messaging platform to request a change in the delivery address;
[0067] The e-commerce platform will first identify the channel:
[0068] Email (xxxx@example.com);
[0069] Social media platform (xx@zhangsan);
[0070] Communication platform (xxx+123456789);
[0071] Then collect data:
[0072] Collect Zhang San's email content from the email server;
[0073] Collect Zhang San’s tweets from the social platform API;
[0074] Collect Zhang San’s instant messages from the communication platform API;
[0075] Then the data is preprocessed, including:
[0076] Remove duplicate emails and invalid tweets previously sent by Zhang San;
[0077] Convert all text content into Unicode format;
[0078] Identify emails as “order enquiries”, tweets as “complaints”, and instant messages as “change of address”;
[0079] Finally, data aggregation is performed, including:
[0080] Through user ID, email address, phone number and other information, confirm that these three interactive contents are all from Zhang San;
[0081] Combine John's emails, tweets, and instant messages into a single conversation log.
[0082] Since tweets involve complaints, they have the highest priority, followed by instant messages and emails;
[0083] The data display results are as follows, showing Zhang San’s aggregated interaction records in the customer service system interface:
[0084] User: Zhang San
[0085] - Email (order inquiry): "Please tell me the status of my order? Order number: 12345"
[0086] - Social media platforms (complaints): "@e-commerce platform I have been waiting for a week, why hasn't my package arrived yet?"
[0087] - Communication platform (address change): "Hello, I need to change my delivery address, the new address is:...";
[0088] Through message aggregation, the customer service system of the e-commerce platform can provide a unified view, that is, customer service personnel can view all relevant user interaction content in one interface, avoiding switching between multiple systems. At the same time, it integrates interaction information from all channels, quickly identifies and responds to user needs and problems, and users can get consistent and fast feedback no matter which channel they contact the platform through, thereby enhancing user satisfaction.
[0089] It should be added that a specific example of applying a preset transmission encryption protocol to establish an encrypted connection for the data governance framework and generating a static key for the data governance framework is as follows:
[0090] Assume that an e-commerce platform needs to securely transmit sensitive order information of e-commerce users from the platform server to the server of a third-party logistics service provider. First, it needs to select a transmission encryption protocol. Assume that the e-commerce platform and the logistics service provider decide to use the TLS protocol to ensure transmission security.
[0091] First, the encrypted connection is initialized. The client (e-commerce platform server) initiates a TLS handshake request to the server (logistics service provider server). The e-commerce platform server verifies the digital certificate provided by the logistics service provider server to ensure its authenticity, and then generates a static key. During the handshake process, the two parties negotiate to generate a symmetric key, assuming it is an AES 256-bit key. Through the TLS handshake process, the symmetric key is securely shared; then data encryption and transmission are performed, that is, the e-commerce platform server uses the generated AES 256-bit static key to encrypt the order information as follows;
[0092] #Generate a random key
[0093] key=os.urandom(32) #256-bit key
[0094] iv=os.urandom(16) #128-bit initial vector
[0095] cipher=Cipher(algorithms.AES(key),modes.CFB(iv),backend=default_backend())
[0096] encryptor = cipher.encryptor()
[0097] plaintext=b"OrderID:12345;UserID:zhangsan;Address:123 Main St"
[0098] ciphertext=encryptor.update(plaintext)+encryptor.finalize()
[0099] The encrypted order information is sent to the logistics service provider's server through a TLS encrypted connection. After receiving the encrypted data, the logistics service provider's server uses the same AES 256-bit static key to decrypt it.
[0100] decryptor = cipher.decryptor()
[0101] decrypted_data=decryptor.update(ciphertext)+decryptor.finalize()print(decrypted_data.decode('utf-8'))#Restore original order information
[0102] Finally, the logistics service provider server verifies the integrity of the data to ensure that the data has not been tampered with;
[0103] In summary, through the above steps, the e-commerce platform can ensure that the user's sensitive order information is fully protected during the transmission process to prevent data leakage and tampering. Selecting the appropriate transmission encryption protocol, generating and using static keys for data encryption, and decrypting and verifying at the receiving end form a complete data security transmission process. This process not only improves the security of data transmission, but also enhances users' trust in the platform.
[0104] In this embodiment, the step S3 of obtaining the user's permission setting for the interactive content according to the basic information and limiting the authorized access to the interactive content on the e-commerce platform according to the permission setting includes:
[0105] S31: Based on the authority level preset by the e-commerce platform, identify other users who request to access the interactive content, perform preset access verification on the other users through the e-commerce platform, and collect verification results;
[0106] S32: Determine whether the verification result matches the authority level;
[0107] S33: If so, obtain the behavior data of the other users on the e-commerce platform, apply a preset machine learning algorithm to establish the behavior pattern of the other users based on the behavior data and the basic information of the other users, calculate the risk factors preset by the other users on the e-commerce platform based on the behavior pattern, and generate the risk level corresponding to the other users' access to the interactive content, wherein the behavior data specifically includes login time, access frequency, browsing history, purchase history, device information and IP address.
[0108] In this embodiment, the system identifies other users who request access to the interactive content based on the permission level pre-set by the e-commerce platform, performs a pre-set access verification on other users who access the interactive content through the e-commerce platform, collects the verification results, and then determines whether the verification results match the permission level pre-set by the e-commerce platform to execute the corresponding steps; for example, when the system determines that the verification result cannot match the permission level pre-set by the e-commerce platform, the system will consider that the user attempting to access the interactive content has insufficient permissions and cannot obtain access rights. The system will display a prompt message of insufficient permissions to the user, informing him that he cannot access the requested content, and provide relevant help information or links on the e-commerce platform to guide the user to understand the permission requirements and methods for improving permissions. At the same time, the access attempt with insufficient permissions is recorded in the system log, and the recorded information includes user ID, request time, request content and permission level, and if the user believes that he should have permission, the system will provide the option of contacting the e-commerce customer service, and the e-commerce customer service staff can further verify and process the user's request; for example When the system determines that the verification result can match the pre-set permission level of the e-commerce platform, the system will consider that the user accessing the interactive content meets the permission, and the system will obtain the user's behavior data on the e-commerce platform. The behavior data specifically includes login time, access frequency, browsing history, purchase history, device information and IP address. According to the behavior data and the basic information of the user, the pre-set machine learning algorithm is applied to establish the user's behavior pattern, and the pre-set risk factor of the user on the e-commerce platform is calculated according to different behavior patterns to generate the corresponding risk level when the user accesses the interactive content; the system conducts more stringent risk assessments on access to sensitive interactive content to ensure that only trusted users can access it, protect user privacy and platform data security, and at the same time, by establishing user behavior patterns and risk factors, the platform can achieve more sophisticated risk control, reduce fraud losses and operational risks, and monitor user behavior in real time, and respond to high-risk behaviors in a timely manner, such as triggering secondary verification, restricting account operations, and sending security reminders.
[0109] It should be noted that a specific example of calculating the risk factor pre-set for the user on the e-commerce platform based on different behavior patterns and generating the corresponding risk level when the user accesses interactive content is as follows:
[0110] Assume that a user named Zhang San performs the following operations on an e-commerce platform. The system calculates the risk factor and generates a risk level based on these operations. The operation data of Zhang San on the e-commerce platform includes:
[0111] Login time: 9:00am to 6:00pm every day;
[0112] Visit frequency: 3-5 times a week;
[0113] Browsing history: mainly browse electronic products and books;
[0114] Purchase records: 1-2 electronic products per month;
[0115] Device information: frequently used PC and mobile phone at home;
[0116] IP address: commonly used fixed IP address at home and office;
[0117] The system detects that Zhang San logs in from a new multinational IP address at 2 a.m. one day and tries to buy a large number of high-priced goods. Since the login time is abnormal, the login time is 2 a.m., which does not match Zhang San’s normal login time, and the login IP is a new multinational IP address, and Zhang San tries to buy a large number of high-priced goods, which does not match Zhang San’s normal purchase record, the system will calculate a high risk factor based on the above anomalies;
[0118] Based on the above risk factors, the system will generate a high risk level. The specific operation steps are as follows:
[0119] Login time: 2:00 am;
[0120] IP address: new multinational IP;
[0121] Purchase behavior: high spending;
[0122] By comparing Zhang San's normal behavior pattern, we found that the login time and IP address were abnormal, and by comparing the purchase records, we found that the consumption amount was abnormal;
[0123] Abnormal login time: risk factor increases;
[0124] Abnormal IP address: increased risk factors;
[0125] Abnormal consumption amount: increased risk factors;
[0126] The risk level is then generated. After comprehensive calculation, the system sets Zhang San's access risk level to high. The system takes corresponding measures based on the high risk level, including restricting Zhang San's access to the interactive content of e-commerce users, requiring him to send a text message verification code or email confirmation, and requiring the e-commerce platform to assist in identity authentication; temporarily freezing the account or restricting large-value transaction operations; and sending a security warning notification to Zhang San to remind him that his account may be at risk.
[0127] In this embodiment, before step S3 of establishing the data life cycle of the interactive content on the e-commerce platform, the following steps are also included:
[0128] S301: Based on the rule engine pre-built by the e-commerce platform, identifying the regional management settings corresponding to the interactive content from the basic information;
[0129] S302: Determine whether the regional management setting restricts the interactive content;
[0130] S303: If so, the rule engine is applied to set keyword filtering rules according to the regional management settings, mark corresponding restriction keywords in the interactive content, intercept the interactive content based on the restriction keywords, generate interception information pushed by the e-commerce platform to the user, and block the interactive content in combination with the regional management settings and the interception information.
[0131] In this embodiment, the system identifies the regional management settings corresponding to the interactive content from the basic information of the e-commerce user based on the rule engine pre-built by the e-commerce platform, and then the system determines whether these regional management settings restrict the interactive content of the e-commerce user to execute the corresponding steps; for example, when the system determines that the regional management settings do not restrict the interactive content of the e-commerce user, the system will consider that the user's interactive content needs to comply with the industry standards of the region where the user is located, and the system will continue to process the user's interactive content to ensure its normal display and interaction, while providing normal user services and interactive functions without additional prompts or restrictions, continuously monitoring the user's interactive content to ensure that it continues to comply with the regional management settings, and recording the interactive content and judgment process for the convenience of auditing and compliance inspections; for example, when the system determines that the regional management settings restrict the interactive content of the e-commerce user, the system will consider that the user's interactive content needs to comply with the industry standards of the region where the user is located, and the system will continue to process the user's interactive content to ensure its normal display and interaction, while providing normal user services and interactive functions without additional prompts or restrictions, and continuously monitoring the user's interactive content to ensure that it continues to comply with the regional management settings, and recording the interactive content and judgment process for the convenience of auditing and compliance inspections. If the interactive content does not meet the industry standards of the region where it is located, the system will apply the rule engine to set keyword filtering rules according to the regional management settings, mark the corresponding restricted keywords in the interactive content, intercept the interactive content according to each restricted keyword, generate interception information pushed by the e-commerce platform to the e-commerce user, and temporarily block the interactive content of the e-commerce user in combination with the regional management settings and interception information until it is detected that the interactive content meets the industry standards of the region where it is located; the system dynamically updates the keyword filtering rules according to the regional management settings to ensure timely response to regional rules and changes. At the same time, the system intercepts and marks the content that does not meet the regional management settings to prevent inappropriate content from spreading on the e-commerce platform and maintain the content security of the platform. The system also generates and pushes interception information to let users know in a timely manner why their content is blocked and how to modify it, so as to avoid repeated attempts to publish non-compliant content due to ignorance.
[0132] In this embodiment, the step S5 of applying a preset transmission encryption protocol to establish an encrypted connection for the data governance framework includes:
[0133] S51: Based on the encryption validity preset by the user for the interactive content, the time granularity of the data governance framework is divided, the current timestamp is introduced into the key generation process according to the time granularity, and the encryption key is generated by combining the timestamp with the preset hash parameter;
[0134] S52: Determine whether the encryption key is decrypted within the encryption time limit;
[0135] S53: If not, regenerate the second encryption key according to the encryption time limit, decentralize the encryption key as a backup key, and use the second encryption key as the master key, reset the encryption time limit to the second encryption time limit, and allow the master key and the backup key to be used together as the decryption content of the data governance framework within the second encryption time limit.
[0136] In this embodiment, the system divides the time granularity of the data governance framework based on the encryption time limit pre-set by the e-commerce user for the interactive content. The time granularity specifically includes seconds, minutes, hours or days. According to different time granularities, the current timestamp is introduced into the key generation process, and an encryption key is generated by combining the timestamp with the pre-set hash parameter. Then the system determines whether the encryption key is used by the e-commerce user for decryption within the encryption time limit to execute the corresponding steps. For example, when the system determines that the encryption key can be used by the e-commerce user for decryption within the encryption time limit, the system will consider that the encryption key is valid and available within the specified time window, and the system will verify the validity of the encryption key, recalculate and generate the encryption key according to the current timestamp and the pre-set hash parameter, compare the newly generated encryption key with the encryption key stored by the user, confirm that the encryption key is valid within the encryption time limit, and allow the user to use the encryption key for decryption operations. The user can continue to access and operate his interactive content without being affected by the encryption time limit, and if the system detects that the encryption key is about to expire or has exceeded the encryption time limit, the system can automatically update the encryption key when the user operates next time, which can ensure the security and availability of the data and Keep the encryption key updated when necessary; for example, when the system determines that the encryption key cannot be used by the e-commerce user for decryption within the encryption time limit, the system will consider the encryption key to have expired, that is, the e-commerce user cannot obtain the encryption key from the e-commerce platform again, but the encryption key will still be valid for a short time. For example, if the e-commerce user enters the encryption key but does not confirm the decryption, the decryption can still be performed, and the system will regenerate a second encryption key based on the encryption time limit, decentralize the encryption key as a backup key, and use the second encryption key as the master key, reset the encryption time limit to the second encryption time limit, and allow the master key and the backup key to be used together as the decryption content of the data governance framework within the second encryption time limit; the system introduces the master key and backup key mechanism to ensure that the user's access to data is not interrupted during the key update process. Even if the encryption time limit expires, the user can still use the backup key for decryption operations. At the same time, the old encryption key is decentralized as a backup key. In this way, even if the new key has just been generated and there is a problem, the user can still decrypt through the backup key, providing double protection, and after the new key is generated, the encryption time limit is reset, so that the user can continue to seamlessly access the data within the time limit of the new key to ensure the availability and continuity of the data.
[0137] In this embodiment, the step S2 of determining whether the interactive content detects preset sensitive information further includes:
[0138] S21: collecting voice information output by the user from the interactive content, removing background noise from the voice information, dividing a long audio stream into a preset number of short audio segments, performing endpoint detection on the short audio segments, and generating corresponding audio features;
[0139] S22: Determine whether the audio feature matches the sensitive information;
[0140] S23: If so, mark the audio feature as sensitive content, apply preset shielding data to obscure information access to the sensitive content, collect the user's privacy settings for the sensitive content on the e-commerce platform, and adjust the voice information accordingly based on the privacy settings, wherein the shielding data specifically includes text shielding, audio muting, and overlay coverage.
[0141] In this embodiment, the system collects voice information output by e-commerce users from interactive content, removes background noise from the voice information, divides the long audio stream into a preset number of short audio clips, performs endpoint detection on these short audio clips, generates corresponding audio features, and then the system determines whether these audio features match the sensitive type information preset by the e-commerce platform to execute corresponding steps; for example, when the system determines that the audio features in the voice information cannot match the sensitive type information, the system will consider that the voice interaction content of the e-commerce user does not contain the sensitive information preset by the platform, and the system will mark these voice messages that do not match the sensitive type information as ordinary content or non-sensitive content, which will help subsequent data auditing and management to ensure data integrity and compliance. At the same time, for voice messages that do not match sensitive type information, the system can continue to monitor its processing results and analysis effects. If it is subsequently found that these voice messages contain unforeseen sensitive content, the system will adjust the preset settings of the sensitive type information according to the actual situation to improve the system's sensitive data detection capabilities, and collect user feedback and data analysis results to obtain new sensitive type information to further improve the system's sensitive data detection capabilities. The system has the ability to detect and process sensitive data. For example, when the system determines that the audio features in the voice information can match sensitive type information, the system will consider that the voice interaction content of the e-commerce user contains sensitive information preset by the e-commerce platform. The system will mark the audio features as sensitive content and apply the pre-set shielding data to blur the information access to the sensitive content. The shielding data specifically includes text shielding, audio muting and overlay coverage. The e-commerce user's privacy settings for sensitive content on the e-commerce platform are collected, and the voice information is adjusted accordingly based on different privacy settings. The system automatically identifies and marks voice content containing sensitive information to avoid the complexity of manual inspection and the risk of missed inspections, and processes sensitive information in a timely manner to prevent unauthorized access and leakage. At the same time, it provides a variety of shielding methods, such as text shielding, audio muting and overlay coverage, to ensure that sensitive information can be effectively protected in different usage scenarios, because the flexible shielding method can be adjusted according to different types of sensitive information and user needs, and the sensitive information is processed accordingly according to the user's privacy settings, respecting the user's privacy preferences, so that users have a higher degree of trust in the platform and believe that their privacy and sensitive information are fully protected.
[0142] In this embodiment, the step S4 of determining whether the data governance framework needs to perform data transfer further includes:
[0143] S41: Identifying the real-time region information of the user on the e-commerce platform;
[0144] S42: Determine whether the real-time region information matches the region pre-recorded by the e-commerce platform;
[0145] S43: If so, the data privacy requirements of the user are obtained based on the real-time regional information, and the data feasibility of the data governance framework at the transfer end is evaluated according to the industry standards pre-recorded by the e-commerce platform on the transfer end.
[0146] In this embodiment, the system identifies the real-time regional information of the e-commerce user on the e-commerce platform, and then the system determines whether the real-time regional information matches the region pre-recorded by the e-commerce platform to execute the corresponding steps; for example, when the system determines that the real-time regional information of the e-commerce user cannot match the region pre-recorded by the e-commerce platform, the system will consider that the e-commerce user does not need to transfer data across regions, and the system will collect and store data according to the standards of the user's current region to ensure compliance with regional rules and platform policies, while continuing to collect the user's interactive content and behavior data in the current region, store user data according to the current regional rules and platform regulations, set localized data access permissions, and ensure that the data is only accessed and processed within the current region; for example, when the system determines that the real-time regional information of the e-commerce user can match the region pre-recorded by the e-commerce platform, the system will consider that the e-commerce user needs to transfer data across regions. For data transfer, the system will obtain the data privacy requirements of e-commerce users based on real-time regional information, and evaluate the data feasibility of the data governance framework at the data transfer end according to the industry standards pre-recorded by the e-commerce platform for the data transfer end. The system ensures that all cross-regional data transmission and processing comply with the rules and industry standards of the target region by evaluating the data feasibility of the data governance framework at the data transfer end, avoiding risks and potential fines caused by non-compliance with data privacy requirements or industry standards. At the same time, by identifying and applying the encryption and security requirements of the target region, it protects the security of user data during transmission and storage, prevents data leakage and unauthorized access, and improves the security and reliability of data transmission. In addition, according to the pre-recorded industry standards, the most appropriate transmission protocol and method are selected to ensure that data is transferred to the target region quickly and reliably, improve data transmission efficiency, and reduce transmission time and possible interruptions.
[0147] In this embodiment, the step S1 of identifying the interactive contents received by each preset channel, aggregating the interactive contents, and generating a priority queue of the interactive contents based on the basic information input by the user through the preset channel further includes:
[0148] S11: Detecting the completeness of basic information items before the user interacts with the e-commerce platform;
[0149] S12: Determine whether the complete item of the basic information matches the basic information;
[0150] S13: If so, construct a queue code for the user to interact with the e-commerce customer service on the e-commerce platform, and determine the interactive service for the user on the e-commerce platform based on the queue code.
[0151] In this embodiment, the system detects the complete basic information items before the e-commerce user interacts with the e-commerce platform, and then the system determines whether these complete basic information items can match the basic information to execute the corresponding steps; for example, when the system determines that the complete basic information items before the e-commerce user interacts cannot match the basic information, the system will consider that the e-commerce user does not have the priority to interact with the e-commerce customer service, that is, the system will prioritize other e-commerce users in the queue before the e-commerce user, and the system will mark the e-commerce user who cannot match the basic information as a non-priority user, which means that the system will not prioritize their interaction requests, but will place them at the end or middle of the queue, waiting for the processing of other priority users before processing their requests, and at the same time insert the interaction request of the e-commerce user into the appropriate position of the queue, usually behind other users who are waiting to be processed in the current queue, and provide a user waiting queue information display or notification function, which can show the e-commerce user his current position in the queue and the estimated waiting time, which helps the user understand the order and timing of processing his interaction request; for example, when the system determines that the e-commerce When the basic information before the user interaction is complete and can match the basic information, the system will consider that the e-commerce user has the priority to interact with the e-commerce customer service. The system will build a queue code for the e-commerce user to interact with the e-commerce customer service on the e-commerce platform, and select the interactive service for the pending e-commerce user on the e-commerce platform based on the queue code; the system can respond to user needs more quickly and timely by giving priority to user interaction requests with complete basic information, thereby significantly improving user satisfaction and experience. At the same time, establishing an interactive service mechanism based on queue codes can effectively manage and optimize the processing order of interactive requests, so that the customer service team can more efficiently handle requests from high-priority users, shorten response time and processing time, and by accurately identifying and giving priority to users with matching basic information, the system can enable the customer service team to focus more on handling the problems and needs of key users, thereby improving customer service efficiency and the speed of problem solving. That is, the interactive service mechanism based on queue codes can also support more personalized services, and can customize service processes and strategies according to user priorities and specific interaction needs to better meet the personalized needs of users.
[0152] Reference Figure 2, is a management system for e-commerce users in one embodiment of the present invention, comprising:
[0153] The identification module 10 is used to identify the interactive content received by each preset channel, aggregate the interactive content, and generate a priority queue of the interactive content based on the basic information input by the user through the preset channel, wherein the basic information specifically includes the interaction type, waiting time and region;
[0154] A determination module 20, used to determine whether preset sensitive information is detected in the interactive content;
[0155] An execution module 30 is used for, if yes, obtaining the permission setting of the user to the interactive content according to the basic information, limiting the authorized access to the interactive content on the e-commerce platform according to the permission setting, collecting the access prerequisites of the interactive content set by the user on the e-commerce platform, establishing the data life cycle of the interactive content on the e-commerce platform, and generating a data governance framework for the interactive content within the data life cycle;
[0156] A second judgment module 40 is used to judge whether the data governance framework needs data transfer;
[0157] The second execution module 50 is used to identify and classify the sensitive information from the data governance framework if necessary, obtain the transfer terminal preset by the user on the e-commerce platform, apply the preset transmission encryption protocol to establish an encrypted connection for the data governance framework, generate a static key for the data governance framework, split the static key data and synchronize it to the e-commerce platform and the transfer terminal, identify the static key data collected by the user from the e-commerce platform and the transfer terminal, and grant the user access rights to the data governance framework on the transfer terminal in combination with the static key data.
[0158] In this embodiment, the identification module 10 identifies the interactive contents received by the pre-set channels of the e-commerce platform, aggregates the interactive contents, generates a priority queue of the interactive contents of each user based on the basic information input by the user through the pre-set channels before the interaction, the basic information specifically including the interaction type, waiting time and region, and then the judgment module 20 judges whether the pre-set sensitive format information is detected in the interactive contents to execute the corresponding steps; for example, when the system determines that the interactive contents of the e-commerce user do not detect the pre-set sensitive format information, the system will deem that the interactive contents of the e-commerce user do not need to be protected by the e-commerce platform using confidentiality measures, It is only necessary to check whether the data meets the industry standards and data protection of the transfer area when it is transferred. The system will use predefined rules and algorithms to check the interactive content to ensure that it does not contain sensitive information. When the automated tool cannot fully confirm, manual review can be introduced to ensure that the interactive content does not contain sensitive information. At the same time, query and obtain the industry standards and data protection rules of the target area to ensure that all necessary compliance requirements are understood. An up-to-date rule database is maintained on the e-commerce platform, including the data protection requirements and industry standards of various regions, and the appropriate data transmission protocol is selected according to the rules of the target area to ensure data security during transmission. For example, when the system determines that the e-commerce When the user's interactive content detects pre-set sensitive format information, the execution module 30 will consider that the interactive content of the e-commerce user needs to be protected by the e-commerce platform using confidentiality measures. The system will obtain the user's permission settings for the interactive content based on the basic information of the e-commerce user, and restrict the interactive content from being accessed by other users on the e-commerce platform based on different permission settings. That is, access to these interactive contents requires the authorization of the e-commerce user, collect the prerequisites for the e-commerce user to access the interactive content from the e-commerce platform, establish a data life cycle for private protection of the interactive content on the e-commerce platform, and generate a data governance framework for the interactive content within the data life cycle; the system automatically detects sensitive Information and triggering protection mechanisms, so that sensitive interactive content is encrypted during storage and transmission, ensuring that sensitive data will not be accessed by unauthorized users. At the same time, according to the basic information and permission settings of e-commerce users, the system can carefully control who can access interactive content, ensuring that only authorized users can view sensitive information, allowing users to set access permissions on the e-commerce platform by themselves, enhancing users' sense of control and trust in their own data, and dynamically adjusting the data governance framework and protection strategy according to the latest regional rule changes, so that the processing of interactive content complies with the privacy protection rules of various regions; then the second judgment module 40 determines whether the data governance framework needs to transfer data to execute the corresponding steps;For example, when the system determines that the data governance framework of the interactive content does not need to transfer data, the system will consider that the e-commerce user does not need to transfer data across regions on the e-commerce platform. The system will ensure that the local storage of interactive content on the e-commerce platform adopts high-standard security measures, such as data encryption and access control, and avoids storing data in an unsafe environment by selecting a storage location that meets security and compliance requirements. At the same time, data backup is performed regularly to ensure that data can be quickly restored in the event of data damage or loss, and data is redundantly stored in multiple physical locations to prevent single point failures. In addition, data access activities are monitored in real time, and access logs are recorded to ensure that every data access and operation can be traced. By setting an abnormal access detection mechanism, unauthorized access behavior can be discovered and responded to in a timely manner. For example, when the system determines that the data governance framework of the interactive content needs to transfer data, the second execution module 50 will consider that the e-commerce user needs to transfer data across regions on the e-commerce platform. The system will identify and classify the corresponding sensitive information from the data governance framework, obtain the data transfer terminal region pre-set by the e-commerce user on the e-commerce platform, The system uses the preset transmission encryption protocol to establish an encrypted connection for the data governance framework, generates a static key for the data governance framework, splits the static key into data and synchronizes it to the e-commerce platform and the data transfer end area, identifies the static key data collected by the e-commerce user from the e-commerce platform and the data transfer end area, and combines the static key data in the e-commerce platform and the data transfer end area, so that the e-commerce user can obtain access rights to the data governance framework in the data transfer end area; the system uses the preset transmission encryption protocol to ensure the confidentiality and integrity of data transmission during data transfer, prevent data from being intercepted or tampered with during transmission, generates static keys and applies them to data encryption, so that even if the data is intercepted, it cannot be decrypted, further improving data security, and at the same time splits and synchronizes the static key to the e-commerce platform and the data transfer end area. It can only be decrypted when both endpoints have the key data. This method enhances the security of the key and prevents single-point theft. In addition, according to the data transfer end area preset by the e-commerce user, the system automatically adjusts the data governance framework and protection measures to ensure that the data meets local rules and requirements at the destination. ;
[0159] In this embodiment, the execution module includes:
[0160] A collection unit, configured to identify other users who request to access the interactive content based on the permission level preset by the e-commerce platform, perform preset access verification on the other users through the e-commerce platform, and collect verification results;
[0161] A judging unit, used to judge whether the verification result matches the permission level;
[0162] an execution unit, for obtaining, if yes, the behavior data of the other users on the e-commerce platform, applying a preset machine learning algorithm to establish the behavior patterns of the other users based on the behavior data and the basic information of the other users, calculating the risk factors preset by the other users on the e-commerce platform based on the behavior patterns, and generating a risk level corresponding to the other users' access to the interactive content, wherein the behavior data specifically includes login time, access frequency, browsing history, purchase history, device information and IP address.
[0163] In this embodiment, the system identifies other users who request access to the interactive content based on the permission level pre-set by the e-commerce platform, performs a pre-set access verification on other users who access the interactive content through the e-commerce platform, collects the verification results, and then determines whether the verification results match the permission level pre-set by the e-commerce platform to execute the corresponding steps; for example, when the system determines that the verification result cannot match the permission level pre-set by the e-commerce platform, the system will consider that the user attempting to access the interactive content has insufficient permissions and cannot obtain access rights. The system will display a prompt message of insufficient permissions to the user, informing him that he cannot access the requested content, and provide relevant help information or links on the e-commerce platform to guide the user to understand the permission requirements and methods for improving permissions. At the same time, the access attempt with insufficient permissions is recorded in the system log, and the recorded information includes user ID, request time, request content and permission level, and if the user believes that he should have permission, the system will provide the option of contacting the e-commerce customer service, and the e-commerce customer service staff can further verify and process the user's request; for example When the system determines that the verification result can match the pre-set permission level of the e-commerce platform, the system will consider that the user accessing the interactive content meets the permission, and the system will obtain the user's behavior data on the e-commerce platform. The behavior data specifically includes login time, access frequency, browsing history, purchase history, device information and IP address. According to the behavior data and the basic information of the user, the pre-set machine learning algorithm is applied to establish the user's behavior pattern, and the pre-set risk factor of the user on the e-commerce platform is calculated according to different behavior patterns to generate the corresponding risk level when the user accesses the interactive content; the system conducts more stringent risk assessments on access to sensitive interactive content to ensure that only trusted users can access it, protect user privacy and platform data security, and at the same time, by establishing user behavior patterns and risk factors, the platform can achieve more sophisticated risk control, reduce fraud losses and operational risks, and monitor user behavior in real time, and respond to high-risk behaviors in a timely manner, such as triggering secondary verification, restricting account operations, and sending security reminders.
[0164] In this embodiment, it also includes:
[0165] A second identification module, configured to identify, from the basic information, a regional management setting corresponding to the interactive content based on a rule engine pre-built by the e-commerce platform;
[0166] A third determination module is used to determine whether the regional management setting restricts the interactive content;
[0167] The third execution module is used to apply the rule engine to set keyword filtering rules according to the regional management settings, mark corresponding restriction keywords in the interactive content, intercept the interactive content based on the restriction keywords, generate interception information pushed by the e-commerce platform to the user, and block the interactive content in combination with the regional management settings and the interception information.
[0168] In this embodiment, the system identifies the regional management settings corresponding to the interactive content from the basic information of the e-commerce user based on the rule engine pre-built by the e-commerce platform, and then the system determines whether these regional management settings restrict the interactive content of the e-commerce user to execute the corresponding steps; for example, when the system determines that the regional management settings do not restrict the interactive content of the e-commerce user, the system will consider that the user's interactive content needs to comply with the industry standards of the region where the user is located, and the system will continue to process the user's interactive content to ensure its normal display and interaction, while providing normal user services and interactive functions without additional prompts or restrictions, continuously monitoring the user's interactive content to ensure that it continues to comply with the regional management settings, and recording the interactive content and judgment process for the convenience of auditing and compliance inspections; for example, when the system determines that the regional management settings restrict the interactive content of the e-commerce user, the system will consider that the user's interactive content needs to comply with the industry standards of the region where the user is located, and the system will continue to process the user's interactive content to ensure its normal display and interaction, while providing normal user services and interactive functions without additional prompts or restrictions, and continuously monitoring the user's interactive content to ensure that it continues to comply with the regional management settings, and recording the interactive content and judgment process for the convenience of auditing and compliance inspections. If the interactive content does not meet the industry standards of the region where it is located, the system will apply the rule engine to set keyword filtering rules according to the regional management settings, mark the corresponding restricted keywords in the interactive content, intercept the interactive content according to each restricted keyword, generate interception information pushed by the e-commerce platform to the e-commerce user, and temporarily block the interactive content of the e-commerce user in combination with the regional management settings and interception information until it is detected that the interactive content meets the industry standards of the region where it is located; the system dynamically updates the keyword filtering rules according to the regional management settings to ensure timely response to regional rules and changes. At the same time, the system intercepts and marks the content that does not meet the regional management settings to prevent inappropriate content from spreading on the e-commerce platform and maintain the content security of the platform. The system also generates and pushes interception information to let users know in a timely manner why their content is blocked and how to modify it, so as to avoid repeated attempts to publish non-compliant content due to ignorance.
[0169] In this embodiment, the second execution module further includes:
[0170] A division unit, used to divide the time granularity of the data governance framework based on the encryption time limit preset by the user for the interactive content, introduce the current timestamp into the key generation process according to the time granularity, and generate an encryption key by combining the timestamp with a preset hash parameter;
[0171] A second judgment unit, used to judge whether the encryption key is decrypted within the encryption time limit;
[0172] The second execution unit is used to regenerate a second encryption key based on the encryption period, if not, decentralize the encryption key as a backup key, and use the second encryption key as a master key, reset the encryption period to the second encryption period, and allow the master key and the backup key to be used together as the decryption content of the data governance framework within the second encryption period.
[0173] In this embodiment, the system divides the time granularity of the data governance framework based on the encryption time limit pre-set by the e-commerce user for the interactive content. The time granularity specifically includes seconds, minutes, hours or days. According to different time granularities, the current timestamp is introduced into the key generation process, and an encryption key is generated by combining the timestamp with the pre-set hash parameter. Then the system determines whether the encryption key is used by the e-commerce user for decryption within the encryption time limit to execute the corresponding steps. For example, when the system determines that the encryption key can be used by the e-commerce user for decryption within the encryption time limit, the system will consider that the encryption key is valid and available within the specified time window, and the system will verify the validity of the encryption key, recalculate and generate the encryption key according to the current timestamp and the pre-set hash parameter, compare the newly generated encryption key with the encryption key stored by the user, confirm that the encryption key is valid within the encryption time limit, and allow the user to use the encryption key for decryption operations. The user can continue to access and operate his interactive content without being affected by the encryption time limit, and if the system detects that the encryption key is about to expire or has exceeded the encryption time limit, the system can automatically update the encryption key when the user operates next time, which can ensure the security and availability of the data and Keep the encryption key updated when necessary; for example, when the system determines that the encryption key cannot be used by the e-commerce user for decryption within the encryption time limit, the system will consider the encryption key to have expired, that is, the e-commerce user cannot obtain the encryption key from the e-commerce platform again, but the encryption key will still be valid for a short time. For example, if the e-commerce user enters the encryption key but does not confirm the decryption, the decryption can still be performed, and the system will regenerate a second encryption key based on the encryption time limit, decentralize the encryption key as a backup key, and use the second encryption key as the master key, reset the encryption time limit to the second encryption time limit, and allow the master key and the backup key to be used together as the decryption content of the data governance framework within the second encryption time limit; the system introduces the master key and backup key mechanism to ensure that the user's access to data is not interrupted during the key update process. Even if the encryption time limit expires, the user can still use the backup key for decryption operations. At the same time, the old encryption key is decentralized as a backup key. In this way, even if the new key has just been generated and there is a problem, the user can still decrypt through the backup key, providing double protection, and after the new key is generated, the encryption time limit is reset, so that the user can continue to seamlessly access the data within the time limit of the new key to ensure the availability and continuity of the data.
[0174] In this embodiment, the judgment module further includes:
[0175] A generating unit, configured to collect voice information output by the user from the interactive content, remove background noise in the voice information, divide a long audio stream into a preset number of short audio segments, perform endpoint detection on the short audio segments, and generate corresponding audio features;
[0176] A third judgment unit, used to judge whether the audio feature matches the sensitive information;
[0177] The third execution unit is used to mark the audio feature as sensitive content, apply preset shielding data to obscure information access to the sensitive content, collect the user's privacy settings for the sensitive content on the e-commerce platform, and adjust the voice information accordingly based on the privacy settings, wherein the shielding data specifically includes text shielding, audio muting, and overlay coverage.
[0178] In this embodiment, the system collects voice information output by e-commerce users from interactive content, removes background noise from the voice information, divides the long audio stream into a preset number of short audio clips, performs endpoint detection on these short audio clips, generates corresponding audio features, and then the system determines whether these audio features match the sensitive type information preset by the e-commerce platform to execute corresponding steps; for example, when the system determines that the audio features in the voice information cannot match the sensitive type information, the system will consider that the voice interaction content of the e-commerce user does not contain the sensitive information preset by the platform, and the system will mark these voice messages that do not match the sensitive type information as ordinary content or non-sensitive content, which will help subsequent data auditing and management to ensure data integrity and compliance. At the same time, for voice messages that do not match sensitive type information, the system can continue to monitor its processing results and analysis effects. If it is subsequently found that these voice messages contain unforeseen sensitive content, the system will adjust the preset settings of the sensitive type information according to the actual situation to improve the system's sensitive data detection capabilities, and collect user feedback and data analysis results to obtain new sensitive type information to further improve the system's sensitive data detection capabilities. The system has the ability to detect and process sensitive data. For example, when the system determines that the audio features in the voice information can match sensitive type information, the system will consider that the voice interaction content of the e-commerce user contains sensitive information preset by the e-commerce platform. The system will mark the audio features as sensitive content and apply the pre-set shielding data to blur the information access to the sensitive content. The shielding data specifically includes text shielding, audio muting and overlay coverage. The e-commerce user's privacy settings for sensitive content on the e-commerce platform are collected, and the voice information is adjusted accordingly based on different privacy settings. The system automatically identifies and marks voice content containing sensitive information to avoid the complexity of manual inspection and the risk of missed inspections, and processes sensitive information in a timely manner to prevent unauthorized access and leakage. At the same time, it provides a variety of shielding methods, such as text shielding, audio muting and overlay coverage, to ensure that sensitive information can be effectively protected in different usage scenarios, because the flexible shielding method can be adjusted according to different types of sensitive information and user needs, and the sensitive information is processed accordingly according to the user's privacy settings, respecting the user's privacy preferences, so that users have a higher degree of trust in the platform and believe that their privacy and sensitive information are fully protected.
[0179] In this embodiment, the second determination module further includes:
[0180] An identification unit, used to identify the real-time region information of the user on the e-commerce platform;
[0181] A fourth determination unit, configured to determine whether the real-time region information matches a region pre-recorded by the e-commerce platform;
[0182] The fourth execution unit is used to obtain the user's data privacy requirements based on the real-time regional information, and evaluate the data feasibility of the data governance framework at the transfer end according to the industry standards pre-recorded by the e-commerce platform on the transfer end.
[0183] In this embodiment, the system identifies the real-time regional information of the e-commerce user on the e-commerce platform, and then the system determines whether the real-time regional information matches the region pre-recorded by the e-commerce platform to execute the corresponding steps; for example, when the system determines that the real-time regional information of the e-commerce user cannot match the region pre-recorded by the e-commerce platform, the system will consider that the e-commerce user does not need to transfer data across regions, and the system will collect and store data according to the standards of the user's current region to ensure compliance with regional rules and platform policies, while continuing to collect the user's interactive content and behavior data in the current region, store user data according to the current regional rules and platform regulations, set localized data access permissions, and ensure that the data is only accessed and processed within the current region; for example, when the system determines that the real-time regional information of the e-commerce user can match the region pre-recorded by the e-commerce platform, the system will consider that the e-commerce user needs to transfer data across regions. For data transfer, the system will obtain the data privacy requirements of e-commerce users based on real-time regional information, and evaluate the data feasibility of the data governance framework at the data transfer end according to the industry standards pre-recorded by the e-commerce platform for the data transfer end. The system ensures that all cross-regional data transmission and processing comply with the rules and industry standards of the target region by evaluating the data feasibility of the data governance framework at the data transfer end, avoiding risks and potential fines caused by non-compliance with data privacy requirements or industry standards. At the same time, by identifying and applying the encryption and security requirements of the target region, it protects the security of user data during transmission and storage, prevents data leakage and unauthorized access, and improves the security and reliability of data transmission. In addition, according to the pre-recorded industry standards, the most appropriate transmission protocol and method are selected to ensure that data is transferred to the target region quickly and reliably, improve data transmission efficiency, and reduce transmission time and possible interruptions.
[0184] In this embodiment, the identification module further includes:
[0185] A detection unit, used to detect the completeness of basic information items before the user interacts with the e-commerce platform;
[0186] A fifth judgment unit, used to judge whether the complete item of the basic information matches the basic information;
[0187] The fifth execution unit is used to construct a queue code for the user to interact with the e-commerce customer service on the e-commerce platform, and determine the interactive service for the user on the e-commerce platform based on the queue code.
[0188] In this embodiment, the system detects the complete basic information items before the e-commerce user interacts with the e-commerce platform, and then the system determines whether these complete basic information items can match the basic information to execute the corresponding steps; for example, when the system determines that the complete basic information items before the e-commerce user interacts cannot match the basic information, the system will consider that the e-commerce user does not have the priority to interact with the e-commerce customer service, that is, the system will prioritize other e-commerce users in the queue before the e-commerce user, and the system will mark the e-commerce user who cannot match the basic information as a non-priority user, which means that the system will not prioritize their interaction requests, but will place them at the end or middle of the queue, waiting for the processing of other priority users before processing their requests, and at the same time insert the interaction request of the e-commerce user into the appropriate position of the queue, usually behind other users who are waiting to be processed in the current queue, and provide a user waiting queue information display or notification function, which can show the e-commerce user his current position in the queue and the estimated waiting time, which helps the user understand the order and timing of processing his interaction request; for example, when the system determines that the e-commerce When the basic information before the user interaction is complete and can match the basic information, the system will consider that the e-commerce user has the priority to interact with the e-commerce customer service. The system will build a queue code for the e-commerce user to interact with the e-commerce customer service on the e-commerce platform, and select the interactive service for the pending e-commerce user on the e-commerce platform based on the queue code; the system can respond to user needs more quickly and timely by giving priority to user interaction requests with complete basic information, thereby significantly improving user satisfaction and experience. At the same time, establishing an interactive service mechanism based on queue codes can effectively manage and optimize the processing order of interactive requests, so that the customer service team can more efficiently handle requests from high-priority users, shorten response time and processing time, and by accurately identifying and giving priority to users with matching basic information, the system can enable the customer service team to focus more on handling the problems and needs of key users, thereby improving customer service efficiency and the speed of problem solving. That is, the interactive service mechanism based on queue codes can also support more personalized services, and can customize service processes and strategies according to user priorities and specific interaction needs to better meet the personalized needs of users.
[0189] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.
Claims
1. A method for managing e-commerce users, characterized in that: The following steps are involved: Identify interactive contents received by each preset channel, aggregate the interactive contents, and generate a priority queue of the interactive contents based on basic information input by the user through the preset channel, wherein the basic information specifically includes the type of interaction, waiting time, and region; Determining whether preset sensitive information is detected in the interactive content; If so, then obtain the user's permission settings for the interactive content based on the basic information, limit authorized access to the interactive content on the e-commerce platform based on the permission settings, collect access prerequisites for the interactive content set by the user on the e-commerce platform, establish a data lifecycle for the interactive content on the e-commerce platform, and generate a data governance framework for the interactive content within the data lifecycle; Determine whether the data governance framework requires data transfer; If necessary, identify and classify the sensitive information from the data governance framework, obtain the transfer terminal preset by the user on the e-commerce platform, apply the preset transmission encryption protocol to establish an encrypted connection for the data governance framework, generate a static key for the data governance framework, split the static key data and synchronize it to the e-commerce platform and the transfer terminal, identify the static key data collected by the user from the e-commerce platform and the transfer terminal, and grant the user access rights to the data governance framework on the transfer terminal in combination with the static key data; Wherein, before the step of establishing the data life cycle of the interactive content on the e-commerce platform, it also includes: Based on the pre-built rule engine of the e-commerce platform, identifying the regional management settings corresponding to the interactive content from the basic information; determining whether the regional management setting restricts the interactive content; If so, the rule engine is applied to set keyword filtering rules according to the regional management settings, mark corresponding restricted keywords in the interactive content, intercept the interactive content based on the restricted keywords, generate interception information pushed by the e-commerce platform to the user, and block the interactive content in combination with the regional management settings and the interception information.
2. The e-commerce user management method according to claim 1, characterized in that: The step of obtaining the user's permission setting for the interactive content according to the basic information, and limiting the authorized access to the interactive content on the e-commerce platform according to the permission setting includes: Based on the permission level preset by the e-commerce platform, identify other users who request to access the interactive content, perform preset access verification on the other users through the e-commerce platform, and collect verification results; Determining whether the verification result matches the permission level; If so, obtain the behavioral data of the other users on the e-commerce platform, apply a preset machine learning algorithm to establish the behavioral patterns of the other users based on the behavioral data and the basic information of the other users, calculate the risk factors preset for the other users on the e-commerce platform based on the behavioral patterns, and generate the risk level corresponding to the other users' access to the interactive content, wherein the behavioral data specifically includes login time, access frequency, browsing history, purchase history, device information and IP address.
3. The method for managing e-commerce users according to claim 1, characterized in that: The step of applying a preset transmission encryption protocol to establish an encrypted connection for the data governance framework includes: Based on the encryption validity preset by the user for the interactive content, the time granularity of the data governance framework is divided, and the current timestamp is introduced into the key generation process according to the time granularity, and the encryption key is generated by combining the timestamp with the preset hash parameter; Determining whether the encryption key is decrypted within the encryption time limit; If not, regenerate the second encryption key based on the encryption time limit, decentralize the encryption key as a backup key, and use the second encryption key as the master key, reset the encryption time limit to the second encryption time limit, and allow the master key and the backup key to be used together as the decryption content of the data governance framework within the second encryption time limit.
4. The method for managing e-commerce users according to claim 1, characterized in that: The step of determining whether preset sensitive information is detected in the interactive content further includes: Collecting voice information output by the user from the interactive content, removing background noise from the voice information, dividing a long audio stream into a preset number of short audio segments, performing endpoint detection on the short audio segments, and generating corresponding audio features; Determining whether the audio feature matches the sensitive information; If so, the audio feature is marked as sensitive content, and preset shielding data is applied to obscure information access to the sensitive content. The user's privacy settings for the sensitive content on the e-commerce platform are collected, and the voice information is adjusted accordingly based on the privacy settings, wherein the shielding data specifically includes text shielding, audio muting, and overlay coverage.
5. The method for managing e-commerce users according to claim 1, characterized in that: The step of determining whether the data governance framework requires data transfer also includes: Identifying the real-time region information of the user on the e-commerce platform; Determining whether the real-time region information matches the regions pre-recorded by the e-commerce platform; If so, the user's data privacy requirements are obtained based on the real-time regional information, and the data feasibility of the data governance framework at the transfer end is evaluated according to the industry standards pre-recorded by the e-commerce platform on the transfer end.
6. The method for managing e-commerce users according to claim 1, characterized in that: The step of identifying the interactive content received by each preset channel, aggregating the interactive content, and generating a priority queue of the interactive content based on basic information input by the user through the preset channel also includes: Detecting the completeness of basic information items before the user interacts with the e-commerce platform; Determine whether the complete item of the basic information matches the basic information; If so, a queue code is constructed for the user to interact with the e-commerce customer service on the e-commerce platform, and an interactive service for the user is determined on the e-commerce platform based on the queue code.
7. A management system for e-commerce users, characterized in that: include: an identification module, used to identify interactive contents received by each preset channel, aggregate the interactive contents, and generate a priority queue of the interactive contents based on basic information input by the user through the preset channel, wherein the basic information specifically includes the type of interaction, waiting time, and region; A determination module, used to determine whether preset sensitive information is detected in the interactive content; an execution module, for, if yes, obtaining the permission setting of the user to the interactive content according to the basic information, limiting the authorized access to the interactive content on the e-commerce platform according to the permission setting, collecting the access prerequisites of the interactive content set by the user on the e-commerce platform, establishing the data life cycle of the interactive content on the e-commerce platform, and generating a data governance framework for the interactive content within the data life cycle; A second judgment module is used to judge whether the data governance framework needs data transfer; The second execution module is used to identify and classify the sensitive information from the data governance framework if necessary, obtain the transfer terminal preset by the user on the e-commerce platform, apply the preset transmission encryption protocol to establish an encrypted connection for the data governance framework, generate a static key for the data governance framework, split the static key and synchronize it to the e-commerce platform and the transfer terminal, identify the static key data collected by the user from the e-commerce platform and the transfer terminal, and grant the user access rights to the data governance framework on the transfer terminal in combination with the static key data; Among them, it also includes: A second identification module, configured to identify, from the basic information, a regional management setting corresponding to the interactive content based on a rule engine pre-built by the e-commerce platform; A third determination module is used to determine whether the regional management setting restricts the interactive content; The third execution module is used to apply the rule engine to set keyword filtering rules according to the regional management settings, mark corresponding restriction keywords in the interactive content, intercept the interactive content based on the restriction keywords, generate interception information pushed by the e-commerce platform to the user, and block the interactive content in combination with the regional management settings and the interception information.
8. The e-commerce user management system according to claim 7, characterized in that: The execution module includes: A collection unit, configured to identify other users who request to access the interactive content based on the permission level preset by the e-commerce platform, perform preset access verification on the other users through the e-commerce platform, and collect verification results; A judging unit, used to judge whether the verification result matches the permission level; an execution unit, for obtaining, if yes, the behavior data of the other users on the e-commerce platform, applying a preset machine learning algorithm to establish the behavior patterns of the other users based on the behavior data and the basic information of the other users, calculating the risk factors preset by the other users on the e-commerce platform based on the behavior patterns, and generating a risk level corresponding to the other users' access to the interactive content, wherein the behavior data specifically includes login time, access frequency, browsing history, purchase history, device information and IP address.
Citation Information
Patent Citations
E-commerce platform-oriented information data migration and security protection system and method
CN115951843A
Sensitive information identification method and device, computer equipment and readable storage medium
CN117034305A
Method for aggregating platform chatting
CN117319334A
Method and device for realizing large-scale data asset classification and grading processing based on transfer learning, processor and readable storage medium thereof
CN117688446A
