Information query method, device and equipment, readable storage medium and program product

Abstract

The invention provides an information query method, device and equipment, a readable storage medium and a program product, which can be applied to the fields of cloud computing and the like, and the method comprises the following steps: a client generates a query request containing a to-be-queried identifier, and sends the query request to a server; the server receives the query request and obtains object basic information from the first information storage system according to the query request; acquiring associated transaction data from a second information storage system according to management time acquired from the management record information; target statistical analysis information is determined according to the associated transaction data, a target anomaly analysis result is determined according to the target statistical analysis information, and the object basic information, the target statistical analysis information and the target anomaly analysis result are sent to the client; and the client displays the object basic information and the statistical analysis information. According to the invention, the transaction data can be acquired in a targeted and cross-system manner, the statistics and analysis of the transaction information can be automatically realized, and the analysis result is beneficial to quickly determining the abnormal transaction data.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to an information query method, an information query device, a computer device, a computer-readable storage medium, and a computer program product. Background Art

[0002] With the continuous development of Internet technology, the application scenarios of online trading technology are also increasing. Online trading refers to the process of using electronic products such as mobile phones and personal computers to trade electronic resources. It effectively combines the Internet, terminal equipment and electronic resource management agencies to form a new trading system. However, in the actual application of online trading, there are often abnormal trading behaviors, which will disrupt the existing electronic resource trading order and have a negative impact on the online trading system. Therefore, it is necessary to find abnormal transaction data from the massive transaction-related information to determine abnormal online trading behaviors.

[0003] Abnormal transaction data is usually determined by professionals reviewing transaction-related information. Transaction-related information includes information of multiple dimensions, such as transaction object information and transaction description information, and this information is usually stored in different systems. Professionals need to access multiple systems to obtain transaction-related information of different dimensions, and then manually count and analyze the acquired transaction-related information containing a lot of redundant information before they can review abnormal transaction data. This information query method is cumbersome to operate, the information obtained contains a lot of redundant information, and it takes a lot of time to determine abnormal transaction data. Therefore, finding an information query method to quickly determine abnormal transaction data is a problem that needs to be solved urgently. Summary of the invention

[0004] The embodiments of the present application provide information query methods, devices, equipment, readable storage media and program products, which can obtain transaction data across systems in a targeted manner and automatically implement the statistical and analysis process of transaction information, and the analysis results are conducive to quickly determining abnormal transaction data.

[0005] On the one hand, an embodiment of the present application provides an information query method, the method comprising:

[0006] Receiving a query request from a client, wherein the query request includes an identifier to be queried;

[0007] In response to the query request, acquiring basic object information associated with the identifier to be queried from the first information storage system, the basic object information including one or more of basic information of the first object, basic information of the second object, and management record information of the second object;

[0008] Acquire the management time corresponding to the second object from the management record information, and acquire the associated transaction data associated with the identifier to be queried from the second information storage system according to the management time;

[0009] Determine target statistical analysis information according to the associated transaction data, wherein the target statistical analysis information includes one or more of transaction statistical information, transaction situation analysis information and transaction object analysis information;

[0010] Determine a weighting parameter corresponding to the target statistical analysis information according to the object basic information, and perform an abnormality analysis on the target statistical analysis information according to the weighting parameter to obtain a target abnormality analysis result;

[0011] The object basic information, the target statistical analysis information and the target abnormality analysis result are sent to the client, so that the client displays the object basic information on an information display interface, and displays the target statistical analysis information on the information display interface according to the target abnormality analysis result.

[0012] Accordingly, an embodiment of the present application provides another information query method, the method comprising:

[0013] Displaying an information query interface, wherein the information query interface includes a query identifier input area;

[0014] Generate a query request according to the identifier to be queried input into the query identifier input area, and send the query request to the server;

[0015] Receive object basic information, target statistical analysis information and target abnormality analysis results returned by the server; the object basic information is associated with the identifier to be queried and is obtained by the server from the first information storage system, and the object basic information includes one or more of the basic information of the first object, the basic information of the second object and the management record information of the second object; the target statistical analysis information is obtained by the server performing data statistical analysis on the associated transaction data, the associated transaction data is associated with the identifier to be queried and is obtained by the server from the second information storage system according to the management time, the management time is obtained from the management record information, and the target statistical analysis information includes one or more of the transaction statistical information, the transaction situation analysis information and the transaction object analysis information; the target abnormality analysis result is determined according to the weighting parameter and the target statistical analysis information, and the weighting parameter is determined according to the object basic information;

[0016] The object basic information is displayed on the information display interface, and the target statistical analysis information is displayed on the information display interface according to the target abnormality analysis result.

[0017] On the one hand, an embodiment of the present application provides an information query device, the device comprising:

[0018] A transceiver unit, configured to receive a query request from a client, wherein the query request includes an identifier to be queried;

[0019] A query unit, configured to obtain, in response to the query request, from the first information storage system basic information of the object associated with the identifier to be queried, the basic information of the object including one or more of basic information of the first object, basic information of the second object, and management record information of the second object;

[0020] The query unit is further configured to obtain the management time corresponding to the second object from the management record information, and obtain the associated transaction data associated with the identifier to be queried from the second information storage system according to the management time;

[0021] A processing unit, configured to determine target statistical analysis information according to the associated transaction data, wherein the target statistical analysis information includes one or more of transaction statistical information, transaction situation analysis information, and transaction object analysis information;

[0022] The processing unit is further used to determine a weighting parameter corresponding to the target statistical analysis information according to the object basic information, and perform an abnormality analysis on the target statistical analysis information according to the weighting parameter to obtain a target abnormality analysis result;

[0023] The transceiver unit is also used to send the object basic information, the target statistical analysis information and the target abnormality analysis result to the client, so that the client displays the object basic information on the information display interface, and displays the target statistical analysis information in the information display interface according to the target abnormality analysis result.

[0024] Accordingly, an embodiment of the present application provides another information query device, the device comprising:

[0025] A display unit, used to display an information query interface, wherein the information query interface includes a query identifier input area;

[0026] A generating unit, configured to generate a query request according to the identifier to be queried input into the query identifier input area, and send the query request to a server;

[0027] A receiving unit, used for receiving object basic information, target statistical analysis information and target abnormality analysis result returned by the server; the object basic information is associated with the identifier to be queried and is obtained by the server from the first information storage system, and the object basic information includes one or more of the basic information of the first object, the basic information of the second object and the management record information of the second object; the target statistical analysis information is obtained by the server performing data statistical analysis on the associated transaction data, the associated transaction data is associated with the identifier to be queried and is obtained by the server from the second information storage system according to the management time, and the management time is obtained from the management record information, and the target statistical analysis information includes one or more of the transaction statistical information, the transaction situation analysis information and the transaction object analysis information; the target abnormality analysis result is determined according to the weighting parameter and the target statistical analysis information, and the weighting parameter is determined according to the object basic information;

[0028] The display unit is further used to display the basic information of the object on the information display interface, and to display the target statistical analysis information on the information display interface according to the target abnormality analysis result.

[0029] On the one hand, an embodiment of the present application provides a computer device, comprising: a processor, a communication interface and a memory, wherein the processor, the communication interface and the memory are interconnected, wherein the memory stores executable program code, and the processor is used to call the executable program code to implement the information query method provided in the embodiment of the present application.

[0030] Accordingly, an embodiment of the present application further provides a computer-readable storage medium, in which instructions are stored. When the computer-readable storage medium is executed on a computer, the computer implements the information query method provided by the embodiment of the present application.

[0031] Accordingly, the embodiment of the present application further provides a computer program product, the computer program product includes a computer program or a computer instruction, and the computer program or the computer instruction is stored in a computer-readable storage medium. The processor of the computer device reads the computer program or the computer instruction from the computer-readable storage medium, and the processor executes the computer program or the computer instruction, so that the computer device implements the information query method provided in the embodiment of the present application.

[0032] In the present application, the client generates a query request according to an input identifier to be queried, and the server receives the query request sent by the client; in response to the query request, the server obtains object basic information from the first information storage system, the object basic information includes one or more of the basic information of the first object, the basic information of the second object, and the management record information of the second object, and determines the management time according to the management record information of the object basic information, and obtains related transaction data from the second information storage system according to the management time; determines target statistical analysis information according to the related transaction data, the target statistical analysis information includes one or more of transaction statistical information, transaction situation analysis information and transaction object analysis information; determines weighting parameters according to the object basic information, and determines target abnormality analysis results according to the weighting parameters and the target statistical analysis information, sends the object basic information, target statistical analysis information and target abnormality analysis results to the client, and the client displays the object basic information on the information display interface, and displays the target statistical analysis information according to the target abnormality analysis results. According to the information query method provided in the embodiment of the present application, information or data associated with the to-be-queried identifier can be obtained from different information storage systems according to the query request of the client, thereby realizing cross-system data acquisition; in the information query process, the management time can be determined according to the management record information in the object basic information, and the related transaction data can be obtained in a targeted manner according to the management time, thereby reducing redundant information in the acquired data; when determining the target abnormality analysis result, the method provided in the embodiment of the present application will combine the information of the two dimensions of the object basic information and the target statistical analysis information, thereby making the analysis result more reliable; compared with the method of manually querying different systems and acquiring information, the method provided in the embodiment of the present application greatly improves the efficiency of information query; the acquired related transaction data can be automatically statistically and analytically processed, and the obtained information can be sent to the client, thereby realizing automatic analysis and processing of the data, and is also conducive to quickly determining abnormal transaction data based on the object basic information and statistical analysis information, further improving the review efficiency of abnormal transaction information. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0034] Figure 1 is a schematic diagram of the system architecture of an information query system exemplarily provided in an embodiment of the present application;

[0035] Figure 2It is a flowchart of an information query method exemplarily provided in an embodiment of the present application;

[0036] Figure 3 An exemplary method for obtaining information provided by an embodiment of the present application is shown;

[0037] Figure 4 The following shows basic information of an object provided by way of example in an embodiment of the present application;

[0038] Figure 5 Shows a kind of statistical information exemplarily provided by an embodiment of the present application;

[0039] Figure 6 An exemplary information determination method provided by an embodiment of the present application is shown;

[0040] Figure 7 A text analysis information exemplarily provided by an embodiment of the present application is shown;

[0041] Figure 8 A time analysis information exemplarily provided by an embodiment of the present application is shown;

[0042] Fig. 9 A kind of number analysis information exemplarily provided by an embodiment of the present application is shown;

[0043] Fig.10 The following is an exemplary embodiment of the present invention providing address analysis information.

[0044] Fig.11 The following is an exemplary embodiment of the present invention providing object analysis information.

[0045] Fig.12 A display method of statistical analysis information provided by an embodiment of the present application is shown;

[0046] Fig.13 It is a flowchart of another information query method exemplarily provided in an embodiment of the present application;

[0047] Fig.14 An information query interface exemplarily provided by an embodiment of the present application is shown;

[0048] Fig.15 is a schematic diagram of an information display interface exemplarily provided in an embodiment of the present application;

[0049] Fig.16 A display method of a description text provided by an exemplary embodiment of the present application is shown;

[0050] Fig.17 It is a flowchart of another information query method exemplarily provided in an embodiment of the present application;

[0051] Fig.18 A result display method exemplarily provided in an embodiment of the present application is shown;

[0052] Fig.19 is a schematic block diagram of an information query device exemplarily provided in an embodiment of the present application;

[0053] Fig. 20 is a schematic block diagram of another information query device exemplarily provided in an embodiment of the present application;

[0054] Fig.21 It is a schematic block diagram of a computer device exemplarily provided in an embodiment of the present application. DETAILED DESCRIPTION

[0055] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0056] It should be noted that the descriptions of "first", "second", etc. involved in the embodiments of the present application are only for descriptive purposes and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of the indicated technical features. Therefore, the technical features defined as "first" or "second" may explicitly or implicitly include at least one of the features.

[0057] As the application of online trading technology becomes more and more widespread, there are more and more abnormal trading behaviors in online trading scenarios. In order to detect abnormal trading behaviors in a timely manner and minimize the negative impact that abnormal trading behaviors may cause, it is necessary to obtain and analyze the existing transaction record information to find abnormal transaction record information. Transaction record information usually includes information in multiple dimensions such as transaction object information, transaction description information, and transaction content information, and this information is usually stored in different information storage systems. Technical personnel need to obtain access rights to multiple information storage systems, search multiple information storage systems to obtain complete transaction record information, and perform statistics and analysis on the complex and redundant transaction record information obtained to determine abnormal transaction data. This method has cumbersome steps, the obtained transaction record information contains redundant information, and requires a lot of manpower to determine abnormal transaction data.

[0058] Based on this, an embodiment of the present application provides an information query method, wherein a client can generate a query request based on a to-be-queried identifier input into an information query interface, and send the query request to a server; the server can receive the query request from the client; in response to the query request, obtain basic information of an object associated with the to-be-queried identifier from a first information storage system, the basic information of the object including one or more of basic information of the first object, basic information of the second object, and management record information of the second object; determine a management time based on the management record information of the basic information of the object, and obtain associated transaction data associated with the to-be-queried identifier from a second information storage system based on the management time; determine target statistical analysis information based on the associated transaction data, the target statistical analysis information including one or more of transaction statistical information, transaction situation analysis information, and transaction object analysis information; determine a weighting parameter based on the object basic information, and determine a target abnormality analysis result based on the weighting parameter and the target statistical analysis information, send the object basic information, the target statistical analysis information, and the target abnormality analysis result to the client, and the client displays the received object basic information on the information display interface, and displays the target statistical analysis information based on the target abnormality analysis result. Through the information query method provided in the embodiment of the present application, the basic information of the object and the related transaction information associated with the to-be-queried identification can be obtained across systems, thereby improving the efficiency of information query; the related transaction information can be obtained in a targeted manner based on the basic information of the object, thereby reducing redundant information in the acquired transaction information; the statistics and analysis processing of the related transaction data can be automatically realized, and the abnormal analysis results can be determined based on the basic information of the object and the statistical analysis information, and the abnormal transaction data can be determined quickly and accurately, thereby further reducing the manpower cost consumed in the abnormal information review.

[0059] The information query method provided in the embodiment of the present application can be applied to the cloud storage scenario in cloud computing. Cloud computing is a computing mode that distributes computing tasks on a resource pool composed of a large number of computers, so that various application systems can obtain computing power, storage space and information services as needed. Cloud storage is a new concept extended and developed from the concept of cloud computing. A distributed cloud storage system (hereinafter referred to as a storage system) refers to a storage system that uses cluster applications, grid technology, and distributed storage file systems to bring together a large number of storage devices of various types in the network (storage devices are also called storage nodes) through application software or application interfaces to work together and provide data storage and business access functions to the outside world. In the present application, cloud storage technology can be used to store massive amounts of object basic information and associated transaction data. When the server receives a query request including a to-be-queried identifier sent by a client, the server responds to the query request, obtains the object basic information associated with the to-be-queried identifier from the first cloud storage system, determines the management time according to the management record information of the object basic information, and obtains the associated transaction data associated with the to-be-queried identifier from the second cloud storage system according to the management time, thereby further improving the efficiency of data query.

[0060] The architecture of the information query system provided in the embodiment of the present application will be introduced below with reference to the accompanying drawings.

[0061] See also Figure 1 , which is a schematic diagram of the system architecture of an information query system provided by way of example in an embodiment of the present application, the information query system includes: a client 101, a server 102 and a database 103 (including a data block 103a and a database 103b); the server 102 can perform data interaction with the client 101 and the database 103. Among them:

[0062] The client 101 can interact with the server 102 for data or with an object. The client 101 can be a handheld device (such as a smart phone, a tablet), a computing device (such as a personal computer (PC), a vehicle terminal, an intelligent voice interaction device, a wearable device or other intelligent device, but is not limited thereto.

[0063] The server 102 can obtain data from the database 103, process the obtained data, and send the processed data to the client 101. The server 102 can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, content delivery networks (CDNs), and big data and artificial intelligence platforms.

[0064] The database 103 may include a plurality of different databases. Figure 1 Take the database 103a and the database 103b in the example: the database 103a and the database 103b store data of different dimensions. The database 103a and the database 103b can be databases located in the server 102, that is, they can be databases built into or carried by the server; the database 103a and the database 103b can also be peripheral databases connected to the server, such as a cloud database (i.e., a database deployed in the cloud), which can be specifically based on any one of private cloud, public cloud, hybrid cloud, edge cloud, etc., so that the cloud database focuses on different functions. For example, for a database deployed in a private cloud, the basic cloud hardware is the user's personal equipment, and it focuses more on serving a small number of users, while the database deployed in the public cloud is deployed based on a cloud platform provided by a third party, which can enable data stored in the database to achieve data sharing, and any user's data can be stored in the database, and any user can also use the data in the database.

[0065] The following will explain in detail Figure 1 The working principle of the information query system shown:

[0066] The client 101 displays an information query interface, which includes a query identifier input area; the client 101 interacts with the object, generates a query request according to the identifier to be queried input in the query identifier input area, and sends the query request to the server 102; after receiving the query request from the client, the server 102 obtains basic information of the object associated with the identifier to be queried from the database 103a in response to the query request, and the basic information of the object may include one or more of the basic information of the first object, the basic information of the second object, and the management record information of the second object; obtains the second object from the management record information in the basic information of the object; The server 102 determines the target statistical analysis information according to the associated transaction data, and the target statistical analysis information may include one or more of transaction statistical information, transaction situation analysis information and transaction object analysis information; determines the weighting parameter corresponding to the target statistical analysis information according to the object basic information, and performs abnormal analysis on the target statistical analysis information according to the weighting parameter to obtain the target abnormal analysis result, and the server 102 then sends the object basic information, target statistical analysis information and target abnormal analysis result to the client 101. The client 101 receives the object basic information, target statistical analysis information and target abnormal analysis result returned by the server 102, and displays the object basic information on the information display interface, and displays the target statistical analysis information according to the target abnormal analysis result. The information query method provided in the embodiment of the present application can obtain information or data associated with the to-be-queried identifier from different information storage systems according to the query request of the client, thereby realizing cross-system data acquisition and greatly improving the efficiency of information query; related transaction data can be obtained in a targeted manner according to the basic information of the object, so that the obtained data contains only less redundant data, thereby improving the efficiency of data analysis; the obtained related transaction data can be automatically statistically and analytically processed, which is conducive to quickly and accurately determining abnormal transaction data according to the basic information of the object, the target statistical analysis information and the target abnormal analysis results, thereby improving the review efficiency of abnormal transaction information.

[0067] It is understandable that the collection and processing of relevant data (such as basic information of the subject, related transaction data, etc.) in this application should be strictly in accordance with the requirements of relevant national laws and regulations when applied in examples, and the informed consent or separate consent of the personal information subject (or with a legal basis) should be obtained, and subsequent data use and processing should be carried out within the scope of authorization of laws and regulations and the personal information subject.

[0068] It is understandable that the architectural diagram of the information query system described in the embodiment of the present application is intended to more clearly illustrate the information query method of the embodiment of the present application, and does not constitute a limitation on the technical solution provided in the embodiment of the present application. For example, the information query method provided in the embodiment of the present application can be executed by the server 102 as well as by other servers or server clusters that are different from the server 102 and can communicate with the client 101 and / or the server 102. For example, the method provided in the embodiment of the present application can also be executed alone by the client 101 having computing power and model processing capabilities. It is known to those skilled in the art that Figure 1 The number of clients and servers in the embodiment is only for illustration. According to the business implementation requirements, any number of clients and servers can be configured. Moreover, with the evolution of the system architecture and the emergence of new business scenarios, the information query method provided in the embodiment of the present application is also applicable to similar technical problems.

[0069] See also Figure 2 , Figure 2 The following is a flow chart of an information query method provided as an example in an embodiment of the present application. The information query method can be implemented by the above-mentioned server 102, or by other server devices. The flow of the information query method provided in the embodiment of the present application includes but is not limited to:

[0070] S201: Receive a query request from a client, where the query request includes an identifier to be queried.

[0071] In an embodiment of the present application, the server receives a query request sent by the client, and the query request may include an identifier to be queried. The identifier to be queried may be basic identification information of the first object, or auxiliary identification information of the first object, or identification information of the second object; wherein the first object may be a basic object in the electronic resource trading platform; the second object is an object for electronic resource trading in the electronic resource trading platform, and the second object is associated with the first object. For example: the first object is a basic object in the electronic resource trading platform (object A), and the first object corresponds to a second object (object B), then in the electronic resource trading platform, object A can use object B to conduct electronic resource transactions with other objects. A first object may be associated with multiple second objects. The basic identification information of the first object, the auxiliary identification information of the first object, and the identification information of the second object are all unique and can be used to distinguish the first object from the second object. For example: the first object may be a customer (or user) of an electronic resource trading platform, and the second object may be an account registered by the customer on the electronic resource trading platform; the basic identification information of the first object may be the generated number information of the customer, which is generated by the system when creating the relevant information of the customer; the auxiliary identification information of the first object may be the input number information of the customer, which is input after the relevant information of the customer is created; the identification information of the second object may be the account number information, which is generated by the system when creating the account.

[0072] In one embodiment, the query request may further include interface indication information, where the interface indication information is used to indicate relevant information of the interface called when the server obtains basic information of the object associated with the identifier to be queried.

[0073] S202. In response to the query request, obtain basic information of the object associated with the identifier to be queried from the first information storage system, where the basic information of the object includes one or more of basic information of the first object, basic information of the second object, and management record information of the second object.

[0074] In the embodiment of the present application, the server obtains the basic information of the object associated with the to-be-queried identifier from the first information query system in response to the query request. The basic information of the object associated with the to-be-queried identifier may include one or more of the basic information of the first object, the basic information of the second object, and the management record information of the second object. The basic information of the first object may include the name, number, address information, etc. of the first object; the basic information of the second object may include the name, number, status, binding information, etc. of the second object; the management record information of the second object is used to indicate the managed record of the second object within a certain period of time, and the management record information may include the processed information, the audited information, etc. of the second object. The management record information can reflect the abnormal transaction behavior of the second object within a period of time (for example, within one year) to a certain extent, which is conducive to predicting the subsequent transaction behavior. Through the method provided in the embodiment of the present application, the information and transaction data associated with the to-be-queried identifier can be obtained across systems according to the to-be-queried identifier, thereby realizing the automation of data query; compared with manually obtaining access rights of multiple systems and querying multiple different systems, the method provided in the embodiment of the present application effectively improves the efficiency of data query and reduces the labor cost consumed by data query; the acquired basic information of the object may include information of multiple categories and multiple dimensions, which is conducive to abnormal audit processing and determining abnormal transaction data based on this information, thereby improving the efficiency of abnormal audit.

[0075] In one embodiment, the query request may further include interface indication information. The implementation method of obtaining the basic object information associated with the identifier to be queried from the first information storage system may be: parsing the interface indication information to obtain target interface information; and calling the target interface according to the target interface information to obtain the basic object information associated with the object to be queried from the first information storage system. Figure 3 , this figure shows a method for obtaining basic information of an object exemplarily provided in an embodiment of the present application. After receiving the query request sent by the client, the server parses the query request to obtain the target interface information; performs search processing according to the target interface information to determine the target interface; calls the target interface to query information from the first information query system in real time, and returns the basic object information related to the object to be queried obtained by the query. The method provided in an embodiment of the present application uses an interface to obtain the basic object information related to the object to be queried in real time, simplifies the steps of data acquisition, and improves the efficiency of data acquisition; at the same time, the query request includes interface indication information, which can quickly locate the target interface and obtain data, thereby improving the speed of data query.

[0076] In one embodiment, when the identification information of the second object is to be queried, before obtaining the basic information of the object associated with the identification to be queried from the first information storage system, it is also possible to: query the first information storage system based on the identification information of the second object to obtain the identification information of the first object corresponding to the second object, and the identification information may be basic identification information or auxiliary identification information. Since a first object may be associated with multiple second objects, when all relevant information of the first object needs to be obtained, the identification information of the first object corresponding to the second object may be determined first, and then the basic information of the object may be obtained from the first information storage system based on the identification information of the first object.

[0077] See also Figure 4 , which shows an exemplary type of object basic information provided by an embodiment of the present application. Figure 4 In the embodiment, the server determines the basic information of the object associated with the to-be-queried identifier (including the basic information of the first object, the basic information of the second object, and the management record information of the second object) according to the query request containing the to-be-queried representation sent by the client, and sends the basic information of the object to the client. Then, the basic information of the object displayed by the client can be as follows: Figure 4 shown. Figure 4 In the example, the first object is associated with three second objects, and the object basic information includes three parts: the basic information of the first object ( Figure 4 The second object's basic information ( Figure 4 The second object is the account object information) and the management record information of the second object ( Figure 4 The basic information of the second object includes the basic information of the three second objects, and the management record information of the second object is obtained by integrating the management record information of the three second objects. The basic information of the first object may include the name information of the first object (i.e. Figure 4 "Name" in "Customer Object Information"), attribute information (i.e. Figure 4 "Age" in "Customer Information"), number information (i.e. Figure 4 "Number" in "Customer Object Information"), address information (i.e. Figure 4 "Address" in "Customer Object Information") and image information (i.e. Figure 4 "Photo" in "Customer Object Information"), Figure 4 In the example, the name information of the first object is "Wang", the attribute information is "23", the number information is "X1289012837", and the address information is "A place". The basic information of the second object may include the number information of the second object (i.e. Figure 4 "Account object information" in the "number"), name information (i.e. Figure 4 "Nickname" in "Account Object Information"), status information (i.e. Figure 4"Status" in "Account Object Information"), time information (i.e. Figure 4 "Registration time" in "Account object information"), binding information (i.e. Figure 4 "Account Object Information" in "Binding Information") and address information (i.e. Figure 4 "Address" in "Account Object Information"). Figure 4 The "total number 3: 3 normal numbers; 0 cancelled numbers" in the account object information is used to indicate the status of the second object as a whole. The numbering information of the three second objects is "S0003", "S0002" and "S0001" respectively; the name information of the three second objects is "W_Jsh3", "W_Jsh2" and "W_Jsh1" respectively; the status information of the three objects is "normal"; the time information of the three second objects is "2022 / 5 / 21", "2022 / 4 / 13" and "2022 / 3 / 10" respectively; the binding information of the three second objects is "MK_02", "MK_02" and "LS_11" respectively; the address information of the three second objects is "unknown", "Place A" and "Place B" respectively. The management record information of the second object may include the control information of the second object (i.e. Figure 4 "Historical Control" in "Management Record Information"), Shangba Information (i.e. Figure 4 "Historical Complaints" in "Management Record Information"), Audit Information (i.e. Figure 4 "Historical Review" in "Management Record Information"), rating information (i.e. Figure 4 "Historical Rating" in "Management Record Information") and list information (i.e. Figure 4 "History List" in "Manage Record Information"); Figure 4 The "Details" in the table is used to obtain the original information corresponding to this type of control record information. Figure 4In the “Historical Control”, “Control Type” includes “Control Type”, and the “Control Type” of the second object is “Only Receive but Not Pay”, and “Number of Times” is “1”. The “Time” here refers to the time when the second object was controlled, which is “2022.01.01”; “Historical Complaint” includes “Complaint Reason”, and the “Complaint Reason” of the second object is “Complaint”, and “Number of Times” is “1”. The “Time” here refers to the time when the server received the complaint information against the second object, which is “2022.03.01”; “Historical Audit” includes “Audit Characterization”, and the “Audit Characterization” of the second object is “First Class Abnormality” and “Second Class Abnormality”. "Normal", "Number of times" are "2" and "2" respectively. The "time" here refers to the time of the most recent audit on the second object. The most recent time for the audit characterization as "First Category Abnormality" is "2022.03.11", and the most recent time for the audit characterization as "Second Category Abnormality" is "2022.05.21"; "Historical Rating" includes "Rating Time", and the "Rating Time" of the second object is "2022-05-14", and the "Risk Level" is "High"; "Historical List" includes "Time", and the "Time" of the second object is "2022-04-23", and the "Hit List" is "List 1". Figure 4 The basic information of the first object, the basic information of the second object, and the management record information of the second object shown in can not only reflect the basic situation of the first object and the second object, but also reflect the historical management of the second object by the system. This is conducive to the abnormal review personnel to have a basic understanding of the first object and the second object, and can quickly and preliminarily judge whether the second object is highly likely to be an abnormal object, thereby playing a role in assisting the abnormal review and improving the efficiency of the abnormal review.

[0078] S203: Acquire the management time corresponding to the second object from the management record information, and acquire the associated transaction data associated with the identifier to be queried from the second information storage system according to the management time.

[0079] In the embodiment of the present application, the management time corresponding to the second object is obtained from the management record information in the object basic information; as described above Figure 4As shown in the "Management and Control Record Information" section, the management record information also includes the time when the management record is made; for example, in the "Historical Complaints" item, the "Reason for Complaint" is the data of "Card Complaints", and its corresponding management record time is specifically "2022.03.01 12:00", then it can be determined that the management time corresponding to the second object is "2022.03.01 12:00", and the associated transaction data associated with the identifier to be queried is obtained from the second information storage system according to the management time. The associated transaction data associated with the identifier to be queried may include multiple transaction data, and each transaction data is associated with the first object. Through the method provided in the embodiment of the present application, the associated transaction data can be obtained from the second information storage system in a targeted manner, so that there is less redundant data in the associated transaction data, which is conducive to improving the subsequent information processing efficiency.

[0080] In one embodiment, the implementation method of acquiring the associated transaction data associated with the identifier to be queried from the second information storage system according to the management time may specifically be: determining the reference transaction time according to the management time and the set time length; acquiring the associated transaction data matching the identifier to be queried from the second information storage system according to the reference transaction time, and the transaction time corresponding to the associated transaction data matches the reference transaction time. The reference transaction time is determined according to the management time and the set time length, the management time is a time point (such as "2022-05-11 12:00"), and the set time length may change according to the actual usage (such as one day, one week or one month). Assuming that the management time is "2022-05-1100:00" and the set time length is one day, the reference transaction time can be determined to be "2022-05-10 00:00" to "2022-05-11 00:00", that is, the reference transaction time is a time period before the management time. Because the management time indicates the time point when the second object is managed, this indicates that before this time point, the transaction behavior performed by the second object may be abnormal, so it is necessary to obtain the transaction data before this time point for analysis and processing.

[0081] In one embodiment, the implementation method of obtaining the management time corresponding to the second object from the management record information may be: obtaining the management time corresponding to the second object from multiple management times included in the management record information according to the judgment index. The judgment index may directly indicate the management time corresponding to a specific management record information (for example, the judgment index indicates "determine the management time with a high risk level in the historical rating items in the management record information as the management time corresponding to the second object"), or may indicate a method for determining the management time corresponding to the second object (for example, the judgment standard indicates "determine the management time corresponding to the complaint cause with the highest number of times in the historical complaint items in the management record information as the management time corresponding to the second object").

[0082] S204: Determine target statistical analysis information according to the associated transaction data, where the target statistical analysis information includes one or more of transaction statistical information, transaction situation analysis information, and transaction object analysis information.

[0083] In an embodiment of the present application, target statistical analysis information is determined based on associated transaction data, and the target statistical analysis information includes one or more of transaction statistical information, transaction situation analysis, and transaction object analysis information. The associated transaction data includes multiple transaction data associated with the first object, and the transaction statistical information is obtained by statistically processing these transaction data, and the transaction situation analysis is determined based on the transaction objects corresponding to these transaction data. In an embodiment of the present application, the target statistical analysis information is determined based on the associated transaction data, and the statistics and analysis processing of the acquired raw data can be realized, and the data processing can be automated, which is conducive to professionals to quickly determine abnormal transaction data based on the target statistical analysis information, thereby improving the efficiency of abnormal auditing; at the same time, the original data is analyzed and processed before being sent to the client, which can avoid the leakage of the original data and ensure the confidentiality and security of the data.

[0084] In one embodiment, the associated transaction data includes multiple transaction data, and the target statistical analysis information includes transaction statistical information. The implementation method for determining the target statistical analysis information based on the associated transaction data can be: for any transaction data among the multiple transaction data, determine the transaction type of the any transaction data, where the transaction type of the transaction data is a transfer-in type or a transfer-out type; determine the transaction scenario of the any transaction data; classify and sum the transaction data according to the transaction type and transaction scenario to obtain transaction statistical information; and determine the target statistical analysis information based on the transaction statistical information. The transaction data in the associated transaction data may include transaction type (transfer-in type or transfer-out type), transaction scenario (such as "online change" scenario, "offline change" scenario, etc.) and transaction quantity (i.e., the quantity of electronic resources traded). The multiple transaction data may be divided into multiple different categories according to the transaction type and transaction scenario, and then the transaction quantities of the transaction data in the same category are summed to obtain transaction statistical information. Please refer to Figure 5 , which shows a type of transaction statistics information provided by an exemplary embodiment of the present application. The server classifies and sums multiple transaction data in the associated transaction data to obtain transaction statistics information. Figure 5Here, "three months" means that the transaction time of the transaction data included in the associated transaction data is within the time range of (T-three months, T), where T represents the current date. The transaction types of transaction data include "transfer-in type" and "transfer-out type". By summing up the various data of "transfer-in type" and "transfer-out type" respectively, we can get the "total" type data, and each type includes the total number of transactions and the total number of transactions. The transaction scenarios of transaction data include "online changes", "offline changes", "resource management packages", "resource type conversion" and "others". By performing statistical processing on the transaction data in the associated transaction data, we can get the following: Figure 5 The transaction statistics information. The method provided in the embodiment of the present application divides and counts the transaction data according to the type and application scenario, and obtains clear statistical information, which can reflect the overall characteristics of the related transaction data, roughly reflect the transaction tendency of the related transaction data, and is conducive to further determining abnormal transaction data.

[0085] In one embodiment, the associated transaction data includes multiple transaction data, each of which includes a transaction time. The implementation method for determining the target statistical analysis information based on the associated transaction data can be: obtaining the abnormal transaction time, and the transaction occurring during the abnormal transaction time has a high probability of being an abnormal transaction; according to the transaction time included in each transaction data, obtaining matching transaction data that matches the abnormal transaction time from the multiple transaction data included in the associated transaction data; performing statistical analysis on the matching transaction data to obtain transaction situation analysis information, and determining the target statistical analysis information based on the transaction situation analysis information. The abnormal transaction time can be each time period within a day (for example: 22:00 to 24:00 every day), or it can be a continuous time period (for example: March 3, 2022 to March 23, 2022), and the transaction occurring during the abnormal transaction time has a high probability of being an abnormal transaction. For example: in the time period from 22:00 to 6:00 the next day, online transactions generally do not occur, and transactions occurring during this time period have a high probability of being abnormal transactions. According to the transaction time included in each transaction data, obtaining matching transaction data that matches the abnormal transaction time from the multiple transaction data included in the associated transaction data. For example: the associated transaction data includes 3,000 transaction data, and the occurrence time of these transaction data is within the time range of 0:00 on January 1, 2022 to 0:00 on April 1, 2022, and the abnormal transaction time is "0:00 to 6:00 every day and 22:00 to 0:00 the next day", then the matching transaction data that matches the abnormal transaction time can be determined from the 3,000 transaction data, and 800 matching transaction data are obtained. These 800 matching transaction data are analyzed and processed to obtain transaction situation analysis information, and the target statistical analysis information is determined based on the transaction situation analysis information. The method provided in the embodiment of the present application can use the abnormal transaction time to perform abnormal screening processing on the associated transaction data to obtain matching transaction data, and then further analyze and process the matching transaction data, which can effectively reduce the time consumed by data statistical analysis processing, improve data processing efficiency, and make the abnormal audit results of the data more accurate.

[0086] In one embodiment, the associated transaction data includes multiple transaction data, each of which includes a transaction time; the implementation method for determining the target statistical analysis information based on the associated transaction data can also be: obtaining the transaction division time; dividing the multiple transaction data included in the associated transaction data according to the transaction division time to obtain multiple transaction data sets, each of which includes multiple transaction data, and the transaction data included in each transaction data set are different from each other; analyzing and processing the multiple transaction data in each transaction data set respectively to obtain transaction data set analysis results of each transaction data set; obtaining the transaction abnormality time, and the transaction occurring within the transaction abnormality time is highly likely to be an abnormal transaction; filtering and aggregating the transaction time and the transaction abnormality time in the analysis results of each transaction data set to obtain transaction situation analysis information, and determining the target statistical analysis information based on the transaction situation analysis information. The transaction partition time is used to partition continuous transaction data. The transaction partition time can be one day. For example, the associated transaction data includes 3,000 transaction data, and the occurrence time of these transaction data are all within the time range of 0:00 on January 1, 2022 to 24:00 on January 31, 2022. The transaction partition time is one day. Then, the 3,000 transaction data can be divided into 31 transaction data sets according to the transaction partition time, and multiple transaction data in the 31 transaction data sets are analyzed and processed respectively to obtain the transaction data set analysis results corresponding to the 31 transaction data sets; assuming that the transaction abnormality time is from 0:00 to 6:00, the transaction data included in the transaction abnormality time and the analysis results of each transaction data set are filtered and processed to obtain 31 transaction data filtering and analysis results with a time interval of 0:00 to 6:00, and then the 31 transaction data filtering and analysis results are aggregated to obtain transaction situation analysis information, and the target statistical analysis information can be determined based on the transaction situation analysis information. Please refer to Figure 6 , which shows a method for determining transaction analysis information provided by an exemplary embodiment of the present application. Figure 6 As shown, the server responds to the query request sent by the client, obtains the related transaction data from the information storage system using the management time obtained from the management record information, and performs preliminary screening processing on the related transaction data to remove irrelevant data and redundant data in the related transaction data; then determines the transaction data set according to the transaction division time, analyzes and processes multiple transaction data in each transaction data set, and obtains the transaction data set analysis results of each transaction data set; aggregates the transaction data set analysis results of each transaction data set according to the transaction abnormality time to obtain transaction situation analysis information.

[0087] In one embodiment, all or part of the transaction data in the multiple transaction data include transaction description texts; then the matching transaction data is subjected to data analysis and processing to obtain the transaction situation analysis information, which may be implemented as follows: obtaining each transaction description text included in the matching transaction data; performing attribute analysis on each transaction description text to determine the text data of each transaction description text, and the text attribute is abnormal text or normal text; determining the transaction description text analysis information according to each transaction description text and the text attribute of each transaction description text, and determining the transaction situation analysis information according to the transaction description text analysis information. The transaction description text included in the transaction data may include text, symbols, and numbers, etc. Performing attribute analysis on each transaction description text to determine the text attribute of each description text, and determining the transaction description text analysis information according to the text attribute and the transaction description text, and then determining the transaction situation analysis information. The method provided in the embodiment of the present application analyzes the transaction data from the perspective of the transaction description text of the transaction data, which can enrich the analysis dimension of the transaction data and ensure the accuracy of the transaction abnormality review.

[0088] In one embodiment, the method of performing attribute analysis on each transaction description text and determining the text attribute of each transaction description text can be as follows: for any transaction description text in each transaction description text, perform word segmentation processing on the any transaction description text to obtain multiple word segments corresponding to any transaction description text; perform matching processing on the multiple word segments corresponding to any transaction description text with the sensitive word library to obtain matching results of each word segment, and the matching results are used to indicate whether the sensitive word library contains sensitive words matching the word segment; determine the text attribute of each transaction description text according to the matching results of each word segment corresponding to each transaction description text. For a transaction description text, semantic word segmentation processing can be performed on it to obtain multiple word segments of the transaction description text; the sensitive word library contains multiple sensitive words, and the transaction corresponding to the transaction description text containing these sensitive words has a high probability of being an abnormal transaction, so the multiple word segments of the transaction description text are matched with the sensitive word library to obtain matching results of each word segment (the matching results indicate whether the word segment is a sensitive word); if the word segment exceeding the set threshold number is a sensitive word, the text attribute of the transaction description text is determined to be an abnormal text.

[0089] In one embodiment, each transaction data also includes the number of transactions; the implementation method of performing data analysis processing on the matching transaction data to obtain the transaction situation analysis information may be: obtaining the number of transactions included in each matching transaction data; performing statistical processing on the obtained transaction number to determine the statistical information corresponding to each number type, the number type includes one or more of a special number type, a high-frequency number type, an integer number type, a general integer number type, and a specific number type; determining the transaction data analysis information according to the statistical information corresponding to each number type, and determining the transaction situation analysis information according to the transaction number analysis information. The number in the special number type may be a number with special meaning, for example: a number with a last digit of 66, 88, etc. The number in the high-frequency number type may be the number that appears the most times among all transaction numbers, for example: among 300 transaction numbers, after the number of occurrences is sorted from high to low, the top five numbers are 89, 32, 100, 34, and 67 respectively; these five numbers may be high-frequency numbers. The number in the integer number type can be a ten integer with a remainder of 0 when divided by 10, a hundred integer with a remainder of 0 when divided by 100, a thousand integer with a remainder of 0 when divided by 1000, and a ten thousand integer with a remainder of 0 when divided by 10000. The number in the generic integer number type can be a number with a fluctuation of 5% above or below 10, a number with a fluctuation of 5% above or below 100, a number with a fluctuation of 5% above or below 1000, and a number with a fluctuation of 5% above or below 10000. The number in the specific number type can be a number with a last digit of 1, a number with a last digit of 2, a number with a last digit of 3, and so on. The transaction number is classified and counted according to the number type, and the statistical information corresponding to each number type is determined. The transaction number analysis information is determined according to the statistical information, and the transaction situation analysis information is determined according to the transaction number analysis information. The special number type, high-frequency number type, integer number type, pan-integer number type, specific number type, etc. included in the number type can all be used as judgment conditions for abnormal transaction data, because the number of transactions in normal electronic resource transactions should not have a more obvious distribution pattern. If the statistical information corresponding to the number type indicates that there are a lot of transaction data corresponding to the number type, further abnormal transaction review and processing can be performed based on this. For example: there are 100 transaction data in total, and 90 of them are characteristic number types, then it can be judged that there may be abnormal transaction behaviors in the transaction behaviors corresponding to the 90 transaction data. The method provided in the embodiment of the present application performs statistical processing on the transaction data from the dimension of the number type of the transaction data to obtain transaction number analysis information, which can preliminarily determine whether it is an abnormal transaction behavior, which is conducive to improving the efficiency of abnormal transaction review.

[0090] In one embodiment, each transaction data also includes a transaction address, and the implementation method of performing data analysis and processing on the matching transaction data to obtain the transaction situation analysis information can be: obtaining the transaction address included in each matching transaction data, the transaction address indicating the address of the transaction subject when conducting the electronic resource transaction; performing statistical processing on the obtained transaction address to determine the statistical information corresponding to each address type, the address type including one or two of the in-domain address type and the out-of-domain address type; determining the transaction address analysis information according to the statistical information corresponding to each address type, and determining the transaction situation analysis information according to the transaction address analysis information. The address in the in-domain address type can be an address within a set area; the address in the out-of-domain address type can be an address outside the set area; the range of the set area can be adjusted according to the needs of the actual application. The transaction addresses of normal electronic resource transactions are generally distributed in the same area. If the transaction addresses of some transaction data belong to the out-of-domain address type, the transaction behaviors corresponding to these transaction data may be abnormal transaction behaviors.

[0091] In one embodiment, the implementation method of performing data analysis and processing on the matching transaction data to obtain the transaction situation analysis information may be: obtaining the transaction time included in each matching transaction data; performing statistical processing on the obtained transaction time to determine the statistical information corresponding to each time interval, and the time interval is divided according to the abnormal transaction time; determining the transaction time analysis information according to the statistical information corresponding to each time interval, and determining the transaction situation analysis information according to the transaction time analysis information. The abnormal transaction time can be divided into multiple time intervals, and the time length contained in each time interval is equal. Assuming that the abnormal transaction time is from 0:00 to 3:00 every day, 0:00 to 3:00 can be divided into 9 time intervals according to the rule that each 20 minutes is a time interval. The number of transactions and the number of transactions in each time interval can be counted to determine the statistical information of each time interval. The transaction time analysis information is determined according to the statistical information of each time interval, and the transaction situation analysis information is determined according to the transaction time analysis information.

[0092] In one embodiment, the server determines the target statistical analysis information based on the associated transaction data, and the target statistical analysis information includes the transaction situation analysis information. After the server sends the target statistical analysis information to the client, the client displays the transaction situation analysis information in the target statistical analysis information on the information display interface, and the transaction situation analysis information includes transaction description text analysis information, transaction time analysis information, transaction number analysis information, and transaction address analysis information. Then the transaction description text analysis information displayed in the client can be as follows: Figure 7 shown. Figure 7The transaction analysis information includes the transaction description text analysis information, including the transaction description text analysis summary "a total of 206 transaction description texts, of which 89 involve sensitive words", the type and number of sensitive words involved, and the specific content of the transaction description text "involving sensitive words" (such as Figure 7 In the transaction description, the sensitive words are "word 1", "word 2", "word 3", "word 4", "word 5", and "word 6", and the number of times they appear in the transaction description text is "49", "16", "9", "8", "5", and "2". The transaction description text containing "sensitive words" includes "1. Forward the message and get 100 every day.", "2. Share it with someone and you can get it.").

[0093] The transaction time analysis information displayed in the client can be Figure 8 shown. Figure 8 , the transaction time analysis information module includes the transaction time analysis summary "In the time period of 00:00-06:00, there are 532 transaction data, accounting for 15%, and the total number of transactions is 748,053 yuan, accounting for 14%; in the time period of 22:00-00:00, there are 307 transaction data, accounting for 9%, and the total number of transactions is 384,531.67 yuan, accounting for 7%" and a transaction time analysis line graph, the horizontal axis of which is the time interval (the time range is 24 hours), the vertical axis is the total number of transactions (the scales of the total number of transactions include "50,000", "100,000", "150,000" and "200,000"), and the line represents the change in the number of transactions when time changes.

[0094] The transaction number analysis information displayed in the client terminal can be Fig. 9 shown. Fig. 9In the analysis of transaction number, the statistical information includes special number type, high frequency number type, integer number type, general integer number type, specific number type and other types. In the characteristic number type, the "number of transactions" of the "188.00" type is "10", and the "total" is "1880"; the "number of transactions" of the "168.00" type is "8", and the "total" is "1344"; the "number of transactions" of the "168.88" type is "5", and the "total" is "844.40". In the high frequency number type, the "number of transactions" of the "ten" type is "100", and the "total" is "3000"; the "number of transactions" of the "hundred" type is "100", and the "total" is "10000"; the "number of transactions" of the "thousand" type is "10", and the "total" is "20000"; the "number of transactions" of the "ten thousand" type is "1", and the "total" is "10000". In the generic integer number type, the "number of transactions" of the "generic integer ten" type is "100", and the "total" is "50000"; the "number of transactions" of the "generic integer hundred" type is "100", and the "total" is "11500". In the specific number type: the "number of transactions" of the "ending digit is 0" type is "10", and the "total" is "780"; the "number of transactions" of the "ending digit is 1" type is "10", and the "total" is "1340"; the "number of transactions" of the "ending digit is 2" type is "10", and the "total" is "840". In other types: the "number of transactions" of the "interception" type is "10", and the "total" is "1880"; the "number of transactions" of the "return" type is "8", and the "total" is "1344"; the "number of transactions" of the "transaction" type is "5", and the "total" is "840.40".

[0095] The transaction address analysis information displayed in the client can be Fig.10 The transaction address analysis information includes the statistical information of the address types within the domain and the statistical information of the address types outside the domain. Fig.10 In the data, there are 10 "transfer-out resources" with a total of 25,000 transactions, accounting for 25% of the total transaction data; there are 10 "transfer-in resources" with a total of 75,000 transactions, accounting for 75% of the total transaction data. In the transaction data, the number of transactions of the "in-domain address" type is 5, with a total of 5,560 transactions; the number of transactions of the "out-of-domain address" type is 6, with a total of 7,320 transactions. In the "in-domain address type", there are 4 transaction data with the transaction address of "Place A" with a total of 4,560 transactions; there is 1 transaction data with the transaction address of "Place B" with a total of 1,000 transactions. In the "out-of-domain address type", there are 6 transaction data with the transaction address of "Place A" with a total of 7,320 transactions.

[0096] In one embodiment, the associated transaction data includes multiple transaction data, each of which includes a transaction object; the implementation method of determining the target statistical analysis information based on the associated transaction data may be: obtaining each transaction object included in the associated transaction data, and obtaining the transaction object information of each transaction object; performing statistical processing on the obtained transaction object information to determine the statistical information corresponding to each object feature, the object feature including one or more of attribute features, management record features, and transaction address features; determining the transaction object analysis information based on the statistical information corresponding to each object feature, and determining the target statistical analysis information based on the transaction object analysis information. The transaction object included in the transaction data may be an object that conducts electronic resource transactions with a transaction subject, and the transaction subject may be an object that initiates electronic resource transactions. After obtaining each transaction object included in the associated transaction data, the transaction object information of each transaction object may be obtained from the first information storage system, or may be obtained from other information storage systems different from the first information storage system. The acquired transaction object information may include the name information, number information, address information, etc. of the transaction object. Statistical processing is performed on the transaction object information to determine the statistical information corresponding to each object feature, wherein the attribute features in the object features may include the name attribute features, age attribute features, etc. of the transaction object; the management record features may include the abnormal transfer-out features, abnormal propagation features, etc. of the transaction object; the transaction address features may indicate the address information of the transaction object when conducting online transactions. The transaction object analysis information may reflect whether the transaction object is an abnormal transaction object (for example: if the management record features show that the transaction object has conducted multiple abnormal transaction behaviors, then the transaction object is likely to be an abnormal transaction object, and the online transaction behavior conducted with the transaction object is likely to be an abnormal transaction behavior). If the transaction object analysis information indicates that the transaction object is an abnormal transaction object, then the transaction behavior conducted with the transaction object has a high probability of being an abnormal transaction behavior. The method provided in the embodiment of the present application determines whether the transaction behavior is highly likely to be an abnormal transaction behavior from the dimension of the transaction object, which is conducive to improving the efficiency of abnormal transaction review.

[0097] See also Fig.11 , which shows an exemplary transaction object analysis information provided by an embodiment of the present application. The server determines statistical analysis information based on the associated transaction data, and the statistical analysis information includes transaction object analysis information. The server sends the statistical analysis information to the client, and the transaction object analysis information in the statistical analysis information displayed on the information display interface by the client can be as follows Fig.11 shown. Fig.11 In the transaction object analysis information, the attribute characteristics (i.e. Fig.11In the "Age attribute feature", "Gender attribute feature"), management record feature, and transaction address feature. In the "Age attribute feature", the number of transaction objects with the feature of "0-14" is "10", and the total number of transactions is "780"; the number of transaction objects with the feature of ">65" is "10", and the total number of transactions is "1340". In the "Gender attribute feature", the number of transaction objects with the feature of "Male" is "5", and the total number of transactions is "1880"; the number of transaction objects with the feature of "Female" is "5", and the total number of transactions is "1344". In the "Management record feature" of transaction objects, the number of transaction objects with the feature of "Abnormal transfer out" is "15", and the number of related transaction records is "20"; the number of transaction objects with the feature of "Abnormal propagation" is "15", and the number of related transaction records is "20". In the "Transaction Address Characteristics" of the transaction objects, the number of transaction objects with the characteristic of "external" addresses is "6", and the total number of transactions is "1550"; the number of transaction objects with the characteristic of "internal" addresses is "7", and the total number of transactions is "2598". The transaction object analysis information also includes the analysis information of the newly generated transaction objects "Transaction Object Statistics: New Registration Numbers in the Past 30 Days: 2 People"; the "Transaction Object Numbers" of the two newly generated transaction objects are "X4503" and "X5802" respectively; the names are "Li" and "Zhang" respectively; the "Number of Transactions" with the two transaction objects are "34" and "18" respectively; the "Number of Transactions" with the two transaction objects are "5000" and "64579" respectively; the "Management Records" of the two transaction objects are "Abnormal Propagation" and "Abnormal Transfer Out" respectively.

[0098] S205: Determine a weighting parameter corresponding to the target statistical analysis information according to the object basic information, and perform an abnormality analysis on the target statistical analysis information according to the weighting parameter to obtain a target abnormality analysis result.

[0099] In the embodiment of the present application, the weighted parameter corresponding to the target statistical analysis information can be determined by using the object basic information, and the object basic information can include one or more of the basic information of the first object, the basic information of the second object, and the management record information of the second object. The weighted parameter corresponding to the target statistical analysis information can be obtained by analyzing the object basic information. For example: the object basic information includes the basic information of the first object, and the "age" of the first object in the basic information of the first object is "old", and the target statistical analysis information includes the transaction object analysis information, and the transaction object analysis information can include the "age" of the "transaction object", then the weighted parameter corresponding to the target statistical analysis information can be determined according to the object basic information; for another example, the object basic information includes the management record information of the second object, and the "number of times" of "audit qualitative" as "first type of abnormality" in the "historical suspicious audit" item in the management record information of the second object is greater than the preset threshold, and the target statistical analysis information includes the transaction situation analysis information, and the transaction object analysis information is associated with the "historical suspicious audit" item in the management record information of the second object, then the weighted parameter corresponding to the target statistical analysis information can be determined according to the object basic information. According to the weighted parameter, the target statistical analysis information is analyzed abnormally to obtain the target abnormal analysis result. The method provided in the embodiment of the present application can combine data from multiple dimensions to further analyze and process the target statistical analysis information to obtain target abnormality analysis results, and can accurately determine abnormal statistical analysis information, thereby helping to improve the efficiency of abnormal review.

[0100] In one embodiment, the target statistical analysis information includes the transaction situation analysis information, and the transaction situation analysis information includes the transaction number analysis information. The weighted parameters corresponding to the target statistical analysis information are determined according to the object basic information, and the target statistical analysis information is subjected to abnormal analysis according to the weighted parameters to obtain the target abnormal analysis result. The implementation method may be: obtaining the number of management times corresponding to the second object from the management record information included in the object basic information; determining the weighted parameters corresponding to the transaction number analysis information included in the target statistical analysis information according to the management times; performing abnormal analysis on the transaction number analysis information according to the weighted parameters corresponding to the transaction number analysis information to obtain the abnormal analysis result of the transaction number analysis information; and determining the target abnormal analysis result according to the abnormal analysis result of the transaction number analysis information. The number of management times corresponding to the second object is obtained from the management record information included in the object basic information. For example, if the number of management times corresponding to the second object in the "management record information" is "30", then the weighted parameter corresponding to the transaction number analysis information can be determined as "0.3" based on the management number. The transaction number analysis information is analyzed for abnormality based on the weighted parameter corresponding to the transaction number analysis information (assuming that the data to be weighted corresponding to the transaction number analysis information is "300" at this time), then the weighted parameter and the data to be weighted corresponding to the transaction number analysis information can be multiplied to obtain the weighted data (which is "90") corresponding to the transaction number analysis information; if the abnormal threshold is 100, the weighted data is compared with the abnormal threshold to obtain the abnormal analysis result of the transaction number analysis information (at this time, the abnormal analysis result indicates that the transaction number information does not contain abnormal data); the target abnormal analysis result is determined based on the abnormal analysis result of the transaction number analysis information.

[0101] In one embodiment, the transaction number analysis information includes statistical information corresponding to each number type, and these number types may include one or more of a special number type, a high-frequency number type, an integer number type, a pan-integer number type, and a specific number type. The management times corresponding to the second object can be obtained according to the management record information included in the object basic information, and the weighted parameter corresponding to the target number type can be determined according to the management times, and the target number type is any one of the various number types included in the transaction number analysis information; according to the weighted parameter corresponding to the target number type, an abnormality analysis is performed on the target number type to obtain an abnormality analysis result of the target number type, and the abnormality analysis result of the transaction number analysis information is determined according to the abnormality analysis results of each target number type. For example: according to the number of management times, the weighted parameter of the special number type is determined to be 0.1, the weighted parameter of the high-frequency number type is 0.5, the weighted parameter of the integer number type is 0.2, the weighted parameter of the general integer number type is 0.15, and the weighted parameter of the specific number type is 0.1, and the weighted data corresponding to the special number type is 100, the weighted data corresponding to the high-frequency number type is 10000, the weighted data corresponding to the integer number type is 200, the weighted data corresponding to the general integer number type is 100, and the weighted data corresponding to the specific number type is 20; then it can be determined that the weighted data corresponding to the special number type is 10, the weighted data corresponding to the high-frequency number type is 10000, and the weighted data corresponding to the integer number type is 200. The weighted data corresponding to the special number type, high frequency number type, integer number type, general integer number type and specific number type are all 100, then the abnormal analysis results of the special number type, high frequency number type, integer number type, general integer number type and specific number type can be determined, among which the abnormal analysis results of the high frequency number type indicate that the data type is abnormal; the abnormal analysis results of the transaction number analysis information are determined according to the abnormal analysis results of each number type, so as to determine the target abnormal analysis results. Then the target statistical analysis information displayed by the client in the information display interface according to the target abnormal analysis results is as follows: Fig.12 shown. Fig.12 In the data, the target statistical analysis information includes transaction number information, and the transaction number analysis information includes special number type, high-frequency number type, integer number type, pan-integer number type, and specific number type; since the abnormal analysis result of the high-frequency number type indicates that the number type is abnormal, the high-frequency number type is displayed with a shaded background, and the display mode of other number types is displayed with a transparent background.

[0102] S206. Send the object basic information, the target statistical analysis information and the target abnormality analysis result to the client, so that the client displays the object basic information on an information display interface, and displays the target statistical analysis information on the information display interface according to the target abnormality analysis result.

[0103] In the embodiment of the present application, the server responds to the query request sent by the client, determines the basic information of the object and the associated transaction data, and after determining the target statistical analysis information and the target abnormal analysis results based on the associated transaction data, sends the basic information of the object, the target statistical analysis information and the target abnormal analysis results to the client, so that the client displays the basic information of the object on the information display interface, and displays the statistical analysis information on the information display interface according to the target abnormal analysis results. The target statistical analysis information displayed on the client is obtained after processing by the server. Compared with the associated transaction data directly obtained from the information storage system, the target statistical analysis information is more concise and clearer. At the same time, the client displays the target statistical analysis information instead of the unprocessed associated transaction data, which can better ensure the security and confidentiality of the transaction data. The method provided in the embodiment of the present application can better ensure the security of the original transaction data. At the same time, the processed target statistical analysis information is also conducive to quickly locating abnormal transaction data, which is conducive to improving the efficiency of abnormal transaction review.

[0104] In one embodiment, the abnormal behavior determination result corresponding to the identifier to be queried can be determined based on the object basic information, the target statistical analysis information and the target abnormal analysis result; the abnormal behavior determination result is sent to the client so that the client can display the abnormal behavior determination result on the information display interface. After determining the object basic information, the target statistical analysis information and the target abnormal analysis result, the server further performs abnormal detection processing on the object basic information and the statistical analysis information to obtain the abnormal behavior determination result corresponding to the identifier to be queried (for example: "Please note! The identifier to be queried has abnormal behavior!"), and sends the abnormal behavior determination result to the client, which can further improve the efficiency of abnormal transaction review.

[0105] Based on the above embodiments, the beneficial effects of the present application are as follows: the information query method provided in the embodiments of the present application can obtain the information and transaction data associated with the identifier to be queried across systems according to the identifier to be queried, thereby reducing the steps of information query and improving the efficiency of information query; the related transaction data can be obtained in a targeted manner according to the basic information of the object, thereby reducing the redundant data in the transaction data and effectively improving the efficiency of data processing; the statistical analysis information containing multiple dimensional information is determined according to the related transaction data, which can make the information more concise and accurate, and is conducive to assisting the auditor to quickly locate abnormal transaction data, thereby effectively improving the efficiency of abnormal transaction review; the abnormal analysis results determined according to the basic information of the object and the statistical analysis information can realize the preliminary review of the data and further improve the review efficiency; at the same time, the client can display the processed statistical analysis information instead of the directly obtained related transaction data, thereby effectively ensuring the security and confidentiality of the data; finally, the method provided in the embodiments of the present application can also determine the abnormal behavior judgment result according to the basic information of the object, the statistical analysis information and the abnormal analysis result, thereby realizing the automation of abnormal transaction review and effectively saving labor costs.

[0106] See also Fig.13 , which is a flow chart of another information query method provided by an embodiment of the present application. The information query method can be implemented by the client 101 or by other devices. The flow of the information query method provided in the embodiment of the present application includes but is not limited to:

[0107] S1301. Display an information query interface, wherein the information query interface includes a query identifier input area.

[0108] In the embodiment of the present application, the client displays an information query interface, which includes a query identifier input area for receiving an input identifier to be queried. The identifier to be queried can be basic identifier information of a first object, or auxiliary identifier information of the first object, or identifier information of a second object; wherein the first object can be a basic object in an electronic resource trading platform; the second object is an object for electronic resource trading in the electronic resource trading platform, and the second object is associated with the first object.

[0109] In one embodiment, the information query interface may further include a query control and a time setting control, wherein the query control is used to receive a trigger operation for itself, and the time setting control is used to receive the set time information. Fig.14 , which shows an exemplary information query interface provided by an embodiment of the present application, the information query interface includes a query identifier input area, a query control and a time setting control, the query identifier data input area includes an indication message "Please enter the identifier to be queried", and the time setting control can be dropped down to select the query time interval, such as Fig.14In the , select the time range from "January 1, 2023" to "March 31, 2023".

[0110] S1302: Generate a query request according to the identifier to be queried input in the query identifier input area, and send the query request to a server.

[0111] In the embodiment of the present application, the client obtains the identifier to be queried input in the query identifier input area, generates a query request based on the identifier to be queried, and sends the query request to the server. For information query personnel, they only need to enter the identifier to be queried to send a query request to the server and obtain data related to the identifier to be queried from the server, which effectively improves the query efficiency of data and reduces labor costs.

[0112] In one embodiment, the information query interface may also include a time setting control, and the client obtains the identifier to be queried and the input time interval, and generates a query request based on the identifier to be queried and the input time interval, and sends the query request to the server, wherein the input time interval is used to indicate the range of data obtained from the server. For example: if the input time interval is "January 1, 2022 to January 31, 2022", after receiving the query request, the server can obtain the object basic data and associated transaction data associated with the identifier to be queried from different information storage systems according to the input time interval.

[0113] S1303: Receive the object basic information, target statistical analysis information and target abnormality analysis results returned by the server.

[0114] In an embodiment of the present application, the client receives object basic information, target statistical analysis information, and target abnormal analysis results returned by the server, wherein the object basic information is associated with the identifier to be queried and is obtained by the server from the first information storage system, and the object basic information may include one or more of the basic information of the first object, the basic information of the second object, and the management record information of the second object; the target statistical analysis information is obtained by the server performing data statistical analysis on the associated transaction data, the associated transaction data is associated with the identifier to be queried, and is obtained by the server from the second information storage system according to the management time, and the target statistical analysis information may include one or more of the transaction statistical information, the transaction situation analysis information, and the transaction object analysis information; the management time is obtained from the management record information; the target abnormal analysis result is determined based on the weighted parameter and the target statistical analysis information, and the weighted parameter is determined based on the object basic information. The implementation method of the server determining the object basic information, the target statistical analysis information, and the target abnormal analysis result can be as shown in the above steps S202-S206.

[0115] S1304: Display the basic information of the object on an information display interface, and display the target statistical analysis information on the information display interface according to the target abnormality analysis result.

[0116] In the embodiment of the present application, after the client receives the object basic information, target statistical analysis information and target abnormal analysis results returned by the server, the object basic information is displayed on the information display interface, and the target statistical analysis information is displayed according to the target abnormal analysis results. Fig.15 As shown, the information display interface displays a prompt "The information query results of the identifier to be queried (X1289) are as follows:". The interface may include an object basic information part and a target statistical analysis information part, wherein the object basic information part includes the basic information of the first object (click the "Details" control on the right side of the area to display the above information on the information display interface). Figure 4 The module of the "Customer Object Information" section in the second object), the basic information of the second object (click the "Details" control on the right side of the area to display the above information on the information display interface Figure 4 The module in the "Account Object Information" section of the second object) and the management record information of the second object (click the "Details" control on the right side of the area to display the above information on the information display interface Figure 4 The target statistical analysis information section includes transaction statistics (click the "Details" control on the right side of this area to display the above information on the information display interface). Figure 5 Transaction Statistics Information module shown in the figure), transaction analysis information (click the "Details" control on the right side of this area to display the "Transaction Analysis Information" module on the information display interface. This module can include the above Figure 7 The "Transaction Description Text Analysis Information" module shown above Figure 8 The "Transaction Time Analysis Information" module shown above Fig. 9 The "Transaction Number Analysis Information" module shown above Fig.10 The "Transaction Address Analysis Information" module shown above is the same as Fig.12 The "Transaction Number Analysis Information" module shown above) and transaction object analysis information (click the "Details" control on the right side of this area to display the above information on the information display interface Fig.11 "Transaction Object Analysis Information" module shown).

[0117] In one embodiment, the target statistical analysis information includes transaction situation analysis information, the transaction situation analysis information includes transaction description text analysis information, the transaction description text analysis information includes one or more transaction description texts and text data of each transaction description text, and the text data is abnormal text or normal text. Then, according to the target abnormal analysis result, the implementation method of displaying the statistical analysis information on the information display interface can be: displaying each transaction description text included in the transaction description text analysis information in the transaction description text display area, and the transaction description text display area is included in the information display interface; wherein, the transaction description text with the text attribute of abnormal text is displayed in the first display mode, and the transaction description text with the file attribute of normal text is displayed in the second display mode. The information display interface includes a transaction description text display area, in which the transaction description text with the text attribute of abnormal text will be displayed in the first display mode, and the transaction description text with the text attribute of normal text will be displayed in the second display mode. Using different display modes to display transaction description texts with different file attributes can make the abnormal text clearer, which is conducive to the auditor to locate the abnormal text more quickly and conduct further abnormal transaction audits.

[0118] In one embodiment, the first display mode may be a dynamic display, and the second display mode may be a static display; or, the first display mode is a dynamic display, and the second display mode is a dynamic and highlighted display; or, the first display mode is a red font display, and the second display mode is a black font display; or, the first display mode is a shaded background with bold font display, and the second display mode is a colorless background with normal font display. Fig.16 , which shows a display method of a transaction description text provided by way of example in an embodiment of the present application. Fig.16 In the example, if the text attribute of transaction description text one (the text content is "Forward the message and earn 100 every day.") is abnormal text, transaction description text one is displayed in the first display mode, that is, shaded background and bold font; if the text attribute of transaction description text two (the text content is "Happy holidays") is normal text, transaction description text two is displayed in the second display mode, that is, colorless background and normal font; if the text attribute of transaction description text three (the text content is "Share it") is normal text, transaction description text three is displayed in the second display mode, that is, colorless background and normal font.

[0119] Based on the above embodiments, the beneficial effects of the present application are: the information query method provided in the embodiments of the present application can obtain information and data related to the identifier to be queried by inputting the identifier to be queried, effectively reducing the time spent on obtaining data; in the information display interface, different display methods are used to display information with different attributes, which can better highlight abnormal information, facilitate rapid determination of abnormal transaction data, and thereby improve the efficiency of abnormal transaction review.

[0120] See also Fig.17 , which is a flow chart of another information query method provided by an embodiment of the present application. The information query method can be Figure 1 The information query system in the embodiment of the present application may also be implemented by other systems. The process of the information query method provided in the embodiment of the present application includes but is not limited to:

[0121] S1701. The client displays an information query interface including a query identifier input area, and generates a query request according to the identifier to be queried input into the query identifier input area.

[0122] In an embodiment of the present application, the client displays an information query interface, which includes a query identifier input area for receiving an input identifier to be queried. The identifier to be queried can be basic identification information of a first object, or auxiliary identification information of the first object, or identification information of a second object; wherein the first object can be a basic object in an electronic resource trading platform; the second object is an object for electronic resource trading in the electronic resource trading platform, and the second object is associated with the first object. The client obtains the identifier to be queried input in the query identifier input area, and generates a query request based on the identifier to be queried. For information inquiries, it is only necessary to input the identifier to be queried to send a query request to the server, and obtain data related to the identifier to be queried from the server, which effectively improves the efficiency of data query and reduces labor costs.

[0123] In one embodiment, the information query interface may also include a query control and a time setting control, wherein the query control is used to receive a trigger operation for itself, and the time setting control is used to receive the set time information. The client obtains the identifier to be queried and the input time interval, and generates a query request based on the identifier to be queried and the input time interval, and sends the query request to the server, wherein the input time interval is used to indicate the range of data obtained from the server. For example: if the input time interval is "January 1, 2022 to March 1, 2022", after receiving the query request, the server can obtain the object basic data and associated transaction data associated with the identifier to be queried from different information storage systems according to the input time interval.

[0124] S1702: The client sends the query request to the server.

[0125] In the embodiment of the present application, the client sends a query request to the server, and the server receives the query request sent by the client, and the query request includes a to-be-queried identifier. The to-be-queried identifier may be basic identifier information of a first object, or auxiliary identifier information of the first object, or identifier information of a second object; wherein the first object may be a basic object in an electronic resource trading platform; the second object is an object for electronic resource trading in the electronic resource trading platform, and the second object is associated with the first object.

[0126] In one embodiment, the query request may further include interface indication information, where the interface indication information is used to indicate relevant information of the interface called when the server obtains basic information of the object associated with the identifier to be queried.

[0127] S1703. In response to the query request, the server obtains the basic information of the object associated with the identifier to be queried from the first information storage system, obtains the management time corresponding to the second object from the management record information included in the basic information of the object, and obtains the associated transaction data associated with the identifier to be queried from the second information storage system according to the management time.

[0128] In an embodiment of the present application, in response to a query request, the server obtains the basic information of the object associated with the identifier to be queried from the first information query system, determines the management time corresponding to the second object from the management record information included in the basic information of the object, and obtains the associated transaction data associated with the identifier to be queried from the second information storage system according to the management time. The first information query system is different from the second information query system, and the access rules specified by the two information query systems may be different. The basic information of the object associated with the identifier to be queried may include one or more of the basic information of the first object, the basic information of the second object, and the management record information of the second object. The basic information of the first object may include the name, number, address information, etc. of the first object; the basic information of the second object may include the name, number, status, binding information, etc. of the second object; the management record information of the second object is used to indicate the managed record of the second object within a certain time period, and the management record information may include the processed information, audited information, etc. of the second object. The associated transaction data associated with the identifier to be queried may include multiple transaction data, and each transaction data is associated with the first object. Through the method provided in the embodiment of the present application, information and transaction data associated with the identifier to be queried can be obtained across systems based on the identifier to be queried, thereby realizing the automation of data query; by obtaining related transaction data in a targeted manner based on management time, redundant data in the acquired transaction data can be effectively reduced, thereby improving the efficiency of data query and data processing; compared with manually obtaining access rights to multiple systems and querying multiple different systems, the method provided in the embodiment of the present application effectively improves the efficiency of data query and reduces the manpower cost consumed by data query; the acquired basic information of the object may include information of multiple categories and multiple dimensions, which is conducive to performing exception review processing based on this information, thereby improving the efficiency of exception review.

[0129] In one embodiment, the implementation method of acquiring the associated transaction data associated with the identifier to be queried from the second information storage system according to the management time may specifically be: determining the reference transaction time according to the management time and the set time length; acquiring the associated transaction data matching the identifier to be queried from the second information storage system according to the reference transaction time, and the transaction time corresponding to the associated transaction data matches the reference transaction time. The reference transaction time is determined according to the management time and the set time length, the management time is a time point (such as "2022-05-11 12:00"), and the set time length may change according to the actual usage (such as one day, one week or one month). Assuming that the management time is "2022-05-1100:00" and the set time length is one day, the reference transaction time can be determined to be "2022-05-10 00:00" to "2022-05-11 00:00", that is, the reference transaction time is a time period before the management time. Because the management time indicates the time point when the second object is managed, this indicates that before this time point, the transaction behavior performed by the second object may be abnormal, so it is necessary to obtain the transaction data before this time point for analysis and processing.

[0130] In one embodiment, the query request may also include interface indication information, and the implementation method of obtaining the basic object information associated with the identifier to be queried from the first information storage system may be: parsing the interface indication information to obtain target interface information; and calling the target interface according to the target interface information to obtain the basic object information associated with the object to be queried from the first information storage system. For example: parsing the interface indication information to obtain the target interface information (indicating that the target interface is interface A), the server calls interface A according to the target interface information to obtain the basic object information associated with the object to be queried from the first information storage system.

[0131] In one embodiment, when the identification information of the second object is to be queried, before obtaining the basic information of the object associated with the identification to be queried from the first information storage system, it is also possible to: query the first information storage system based on the identification information of the second object to obtain the identification information of the first object corresponding to the second object, and the identification information may be basic identification information or auxiliary identification information. Since a first object may be associated with multiple second objects, when all relevant information of the first object needs to be obtained, the identification information of the first object corresponding to the second object may be determined first, and then the basic information of the object may be obtained from the first information storage system based on the identification information of the first object.

[0132] S1704. The server determines target statistical analysis information according to the associated transaction data, determines weighted parameters corresponding to the target statistical analysis information according to the object basic information, and performs an abnormality analysis on the target statistical analysis information according to the weighted parameters to obtain a target abnormality analysis result.

[0133] In an embodiment of the present application, target statistical analysis information is determined according to associated transaction data, and the target statistical analysis information may include one or more of transaction statistical information, transaction situation analysis, and transaction object analysis information. The associated transaction data includes multiple transaction data associated with the first object, the transaction statistical information is obtained by statistically processing these transaction data, and the transaction situation analysis is determined according to the transaction object corresponding to these transaction data. After determining the target statistical analysis information, the weighted parameter corresponding to the target statistical analysis information can be determined according to the object basic information, and the target statistical analysis information is analyzed according to the weighted parameter to obtain the target abnormal analysis result. In an embodiment of the present application, the statistical analysis information is determined according to the associated transaction data, and the statistics and analysis processing of the acquired original data can be realized, and the automation of data processing can be realized, which is conducive to professionals to quickly determine abnormal transaction data according to the statistical analysis information, thereby improving the efficiency of abnormal auditing; abnormal analysis of the statistical analysis information combined with the object basic information can effectively improve the accuracy of the abnormal analysis results; at the same time, the original data is analyzed and processed before being sent to the client, which can avoid the leakage of the original data and ensure the confidentiality and security of the data.

[0134] In one embodiment, the associated transaction data includes multiple transaction data, and the target statistical analysis information includes statistical information. The implementation method of determining the target statistical analysis information according to the associated transaction data can be: for any transaction data in the multiple transaction data, determine the transaction type of any transaction data, the transaction type of the transaction data is a transfer-in type or a transfer-out type; determine the transaction scenario of any transaction data; classify and sum the transaction data according to the transaction type and transaction scenario of each transaction data to obtain transaction statistical information; determine the target statistical analysis information according to the transaction statistical information. The transaction data in the associated transaction data may include transaction type (transfer-in type or transfer-out type), transaction scenario (such as "online change" scenario, "offline change" scenario, etc.) and transaction quantity (i.e., the number of electronic resources traded). According to the transaction type and transaction scenario, the multiple transaction data can be divided into multiple different categories, and then the transaction quantity of the transaction data in the same category is summed to obtain transaction statistical information. The method provided in the embodiment of the present application divides and counts the transaction data according to the type and application scenario, and obtains clear transaction statistical information. The transaction statistical information can reflect the overall characteristics of the associated transaction data, roughly reflect the transaction tendency of the associated transaction data, and is conducive to further determining abnormal transaction data.

[0135] In one embodiment, the associated transaction data includes multiple transaction data, each of which includes a transaction time. The implementation method for determining the target statistical analysis information based on the associated transaction data can be: obtaining the abnormal transaction time, and the transaction occurring during the abnormal transaction time has a high probability of being an abnormal transaction; according to the transaction time included in each transaction data, obtaining matching transaction data that matches the abnormal transaction time from the multiple transaction data included in the associated transaction data; performing statistical analysis on the matching transaction data to obtain transaction situation analysis information, and determining the target statistical analysis information based on the transaction situation analysis information. The abnormal transaction time can be each time period within a day (for example: 22:00 to 00:00 the next day), or it can be a continuous time period (for example: May 1, 2022 to June 1, 2022), and the transaction occurring during the abnormal transaction time has a high probability of being an abnormal transaction. For example: online transactions generally do not occur during the time period from 22:00 to 06:00 the next day, so transactions occurring during this time period have a high probability of being abnormal transactions. According to the transaction time included in each transaction data, matching transaction data matching the transaction abnormality time is obtained from multiple transaction data included in the associated transaction data. The method provided in the embodiment of the present application can use the transaction abnormality time to perform abnormal screening processing on the associated transaction data to obtain matching transaction data, and then further analyze and process the matching transaction data, which can effectively reduce the time consumed in data statistical analysis and processing, improve data processing efficiency, and make the data abnormality detection result more accurate.

[0136] In one embodiment, the associated transaction data includes multiple transaction data, each of which includes a transaction time; the implementation method for determining the target statistical analysis information based on the associated transaction data can also be: obtaining the transaction division time; dividing the multiple transaction data included in the associated transaction data according to the transaction division time to obtain multiple transaction data sets, each of which includes multiple transaction data, and the transaction data included in each transaction data set are different from each other; analyzing and processing the multiple transaction data in each transaction data set respectively to obtain transaction data set analysis results of each transaction data set; obtaining the transaction abnormality time, and the transaction occurring within the transaction abnormality time is highly likely to be an abnormal transaction; filtering and aggregating the transaction time and the transaction abnormality time in the analysis results of each transaction data set to obtain transaction situation analysis information, and determining the target statistical analysis information based on the transaction situation analysis information. The transaction division time is used to divide continuous transaction data, and the transaction division time can be one day. For example, the associated transaction data includes 1,000 transaction data, and the occurrence time of these transaction data are all within the time range of 0:00 on March 1, 2022 to 24:00 on March 10, 2022. The transaction division time is one day, then the 1,000 transaction data can be divided into 10 transaction data sets according to the transaction division time, and multiple transaction data in the 10 transaction data sets are analyzed and processed respectively to obtain transaction data set analysis results corresponding to the 10 transaction data sets; assuming that the transaction abnormality time is from 00:00 to 06:00, the transaction data included in the analysis results of each transaction data set are screened and processed to obtain 10 transaction data screening analysis results in the time interval of 00:00 to 06:00, and then the 10 transaction data screening analysis results are aggregated to obtain transaction situation analysis information, and the target statistical analysis information can be determined based on the transaction situation analysis information.

[0137] In one embodiment, all or part of the transaction data in the multiple transaction data include transaction description texts; then the matching transaction data is subjected to data analysis and processing to obtain the transaction situation analysis information, which may be implemented as follows: obtaining each transaction description text included in the matching transaction data; performing attribute analysis on each transaction description text to determine the text data of each transaction description text, and the text attribute is abnormal text or normal text; determining the transaction description text analysis information according to each transaction description text and the text attribute of each transaction description text, and determining the transaction situation analysis information according to the transaction description text analysis information. The transaction description text included in the transaction data may include text, symbols, and numbers, etc. Performing attribute analysis on each transaction description text to determine the text attribute of each description text, and determining the transaction description text analysis information according to the text attribute and the transaction description text, and then determining the transaction situation analysis information. The method provided in the embodiment of the present application analyzes the transaction data from the perspective of the transaction description text of the transaction data, which can enrich the analysis dimension of the transaction data and ensure the accuracy of the transaction abnormality review.

[0138] In one embodiment, the method of performing attribute analysis on each transaction description text and determining the text attribute of each transaction description text can be as follows: for any transaction description text in each transaction description text, perform word segmentation processing on the any transaction description text to obtain multiple word segments corresponding to any transaction description text; perform matching processing on the multiple word segments corresponding to any transaction description text with the sensitive word library to obtain matching results of each word segment, and the matching results are used to indicate whether the sensitive word library contains sensitive words matching the word segment; determine the text attribute of each transaction description text according to the matching results of each word segment corresponding to each transaction description text. For a transaction description text, semantic word segmentation processing can be performed on it to obtain multiple word segments of the transaction description text; the sensitive word library contains multiple sensitive words, and the transaction corresponding to the transaction description text containing these sensitive words has a high probability of being an abnormal transaction, so the multiple word segments of the transaction description text are matched with the sensitive word library to obtain matching results of each word segment (the matching results indicate whether the word segment is a sensitive word); if the word segment exceeding the set threshold number is a sensitive word, the text attribute of the transaction description text is determined to be an abnormal text.

[0139] In one embodiment, each transaction data also includes the number of transactions; the implementation method of performing data analysis processing on the matching transaction data to obtain the transaction situation analysis information may be: obtaining the number of transactions included in each matching transaction data; performing statistical processing on the obtained transaction number to determine the statistical information corresponding to each number type, the number type includes one or more of a special number type, a high-frequency number type, an integer number type, a general integer number type, and a specific number type; determining the transaction data analysis information according to the statistical information corresponding to each number type, and determining the transaction situation analysis information according to the transaction number analysis information. The number in the special number type may be a number with special meaning, for example: a number with a last digit of 6, 8, etc. The number in the high-frequency number type may be the number with the most occurrences among all transaction numbers, for example: among 100 transaction numbers, after the occurrences are sorted from high to low, the top five numbers are 09, 32, 120, 99, and 57 respectively; these five numbers may be high-frequency numbers. The number in the integer number type can be a ten integer with a remainder of 0 when divided by 10, a hundred integer with a remainder of 0 when divided by 100, a thousand integer with a remainder of 0 when divided by 1000, and a ten thousand integer with a remainder of 0 when divided by 10000. The number in the generic integer number type can be a number with a fluctuation of 5% above or below 10, a number with a fluctuation of 5% above or below 100, a number with a fluctuation of 5% above or below 1000, and a number with a fluctuation of 5% above or below 10000. The number in the specific number type can be a number with a last digit of 1, a number with a last digit of 2, a number with a last digit of 3, and so on, and a number with a last digit of 9. The transaction numbers are classified and counted according to the number types, and the statistical information corresponding to each number type is determined. The transaction number analysis information is determined according to the statistical information, and the transaction situation analysis information is determined according to the transaction number analysis information. The special number type, high-frequency number type, integer number type, pan-integer number type, specific number type, etc. included in the number type can all be used as judgment conditions for abnormal transaction data, because the number of transactions in normal electronic resource transactions should not have a more obvious distribution pattern. If the statistical information corresponding to the number type indicates that there are a lot of transaction data corresponding to the number type, further abnormal transaction review and processing can be performed based on this. For example: there are 100 transaction data in total, and 90 of them are characteristic number types, then it can be judged that there may be abnormal transaction behaviors in the transaction behaviors corresponding to the 90 transaction data. The method provided in the embodiment of the present application performs statistical processing on the transaction data from the dimension of the number type of the transaction data to obtain transaction number analysis information, which can preliminarily determine whether it is an abnormal transaction behavior, which is conducive to improving the efficiency of abnormal transaction review.

[0140] In one embodiment, each transaction data also includes a transaction address, and the implementation method of performing data analysis and processing on the matching transaction data to obtain the transaction situation analysis information can be: obtaining the transaction address included in each matching transaction data, the transaction address indicating the address of the transaction subject when conducting the electronic resource transaction; performing statistical processing on the obtained transaction address to determine the statistical information corresponding to each address type, the address type including one or two of the in-domain address type and the out-of-domain address type; determining the transaction address analysis information according to the statistical information corresponding to each address type, and determining the transaction situation analysis information according to the transaction address analysis information. The address in the in-domain address type can be an address within a set area; the address in the out-of-domain address type can be an address outside the set area; the range of the set area can be adjusted according to the needs of the actual application. The transaction addresses of normal electronic resource transactions are generally distributed in the same area. If the transaction addresses of some transaction data belong to the out-of-domain address type, the transaction behaviors corresponding to these transaction data may be abnormal transaction behaviors.

[0141] In one embodiment, the implementation method of performing data analysis and processing on the matching transaction data to obtain the transaction situation analysis information may be: obtaining the transaction time included in each matching transaction data; performing statistical processing on the obtained transaction time to determine the statistical information corresponding to each time interval, and the time interval is divided according to the abnormal transaction time; determining the transaction time analysis information according to the statistical information corresponding to each time interval, and determining the transaction situation analysis information according to the transaction time analysis information. The abnormal transaction time can be divided into multiple time intervals, and the time length contained in each time interval is equal. Assuming that the abnormal transaction time is from 0:00 to 1:00 every day, 0:00 to 1:00 can be divided into 6 time intervals according to the rule that every 10 minutes is a time interval. The number of transactions and the number of transactions in each time interval can be counted to determine the statistical information of each time interval. The transaction time analysis information is determined according to the statistical information of each time interval, and the transaction situation analysis information is determined according to the transaction time analysis information.

[0142] In one embodiment, the associated transaction data includes multiple transaction data, each of which includes a transaction object; the implementation method of determining the target statistical analysis information based on the associated transaction data may be: obtaining each transaction object included in the associated transaction data, and obtaining the transaction object information of each transaction object; performing statistical processing on the obtained transaction object information to determine the statistical information corresponding to each object feature, the object feature including one or more of attribute features, management record features, and transaction address features; determining the transaction object analysis information based on the statistical information corresponding to each object feature, and determining the target statistical analysis information based on the transaction object analysis information. The transaction object included in the transaction data may be an object that conducts electronic resource transactions with a transaction subject, and the transaction subject may be an object that initiates electronic resource transactions. After obtaining each transaction object included in the associated transaction data, the transaction object information of each transaction object may be obtained from the first information storage system, or may be obtained from other information storage systems different from the first information storage system. The acquired transaction object information may include the name information, number information, address information, etc. of the transaction object. Statistical processing is performed on the transaction object information to determine the statistical information corresponding to each object feature, wherein the attribute features in the object features may include the name attribute features, territorial attribute features, regional attribute features, and age attribute features of the transaction object; the management record features may include the abnormal transfer-out features, abnormal propagation features, and abnormal conversion features of the transaction object; the transaction address features may indicate the address information of the transaction object when conducting online transactions. The transaction object analysis information may reflect whether the transaction object is an abnormal transaction object. If the transaction object analysis information indicates that the transaction object is an abnormal transaction object, then the transaction behavior conducted with the transaction object has a high probability of being an abnormal transaction behavior. The method provided in the embodiment of the present application determines whether the transaction behavior is highly likely to be an abnormal transaction behavior from the dimension of the transaction object, which is conducive to improving the efficiency of abnormal transaction review.

[0143] In one embodiment, the target statistical analysis information includes transaction statistical information, transaction situation analysis information, and transaction object analysis information. A number threshold judgment can be performed for each type of transaction statistical information, transaction situation analysis information, and transaction object analysis information in the target statistical analysis information, and a threshold judgment result of each type can be obtained. For example: the statistical information corresponding to each object feature included in the transaction object analysis information in the statistical analysis information is obtained (assuming that the statistical information "number of times" corresponding to the "extraterritorial address" type in the transaction address feature is 300), and the statistical information is judged and processed with the number threshold (assuming that the number threshold corresponding to the "extraterritorial address" type in the transaction address feature is 100), and the threshold judgment result of this type ("exceeding the threshold") can be obtained. The threshold judgment result is used to indicate that there may be abnormal transaction data or transaction types, which is conducive to improving the efficiency of abnormal transaction review.

[0144] In one embodiment, the target statistical analysis information includes the transaction situation analysis information, and the transaction situation analysis information includes the transaction number analysis information. The weighted parameters corresponding to the target statistical analysis information are determined according to the object basic information, and the target statistical analysis information is subjected to abnormal analysis according to the weighted parameters to obtain the target abnormal analysis result. The implementation method may be: obtaining the number of management times corresponding to the second object from the management record information included in the object basic information; determining the weighted parameters corresponding to the transaction number analysis information included in the target statistical analysis information according to the management times; performing abnormal analysis on the transaction number analysis information according to the weighted parameters corresponding to the transaction number analysis information to obtain the abnormal analysis result of the transaction number analysis information; and determining the target abnormal analysis result according to the abnormal analysis result of the transaction number analysis information. The number of management times corresponding to the second object is obtained from the management record information included in the object basic information. For example, if the number of management times corresponding to the second object in the "management record information" is "30", then the weighted parameter corresponding to the transaction number analysis information can be determined as "0.3" based on the management number. The transaction number analysis information is analyzed for abnormality based on the weighted parameter corresponding to the transaction number analysis information (assuming that the data to be weighted corresponding to the transaction number analysis information is "300" at this time), then the weighted parameter and the data to be weighted corresponding to the transaction number analysis information can be multiplied to obtain the weighted data (which is "90") corresponding to the transaction number analysis information; if the abnormal threshold is 100, the weighted data is compared with the abnormal threshold to obtain the abnormal analysis result of the transaction number analysis information (at this time, the abnormal analysis result indicates that the transaction number information does not contain abnormal data); the target abnormal analysis result is determined based on the abnormal analysis result of the transaction number analysis information.

[0145] In one embodiment, the transaction number analysis information includes statistical information corresponding to each number type, and these number types may include one or more of a special number type, a high-frequency number type, an integer number type, a pan-integer number type, and a specific number type. The management times corresponding to the second object can be obtained according to the management record information included in the object basic information, and the weighted parameter corresponding to the target number type can be determined according to the management times, and the target number type is any one of the various number types included in the transaction number analysis information; according to the weighted parameter corresponding to the target number type, an abnormality analysis is performed on the target number type to obtain an abnormality analysis result of the target number type, and the abnormality analysis result of the transaction number analysis information is determined according to the abnormality analysis results of each target number type.

[0146] S1705. The server sends the object basic information, the target statistical analysis information and the target abnormality analysis result to the client.

[0147] In an embodiment of the present application, the server determines the basic information of the object, the target statistical analysis information, and the target abnormal analysis result in response to the query request sent by the client, and sends the basic information of the object, the target statistical analysis information, and the target abnormal analysis result to the client, so that the client displays the basic information of the object on the information display interface, and the client displays the target statistical analysis information on the information display interface according to the target abnormal analysis result. The target statistical analysis information displayed on the client is obtained after processing by the server. Compared with the related transaction data directly obtained from the information storage system, the target statistical analysis information is more concise and clearer. At the same time, the client displays the target statistical analysis information instead of the unprocessed related transaction data, which can better ensure the security and confidentiality of the transaction data. The method provided in the embodiment of the present application can better ensure the security of the original transaction data. At the same time, the processed target statistical analysis information is also conducive to quickly locating abnormal transaction data, which is conducive to improving the efficiency of abnormal transaction review.

[0148] In one embodiment, the abnormal behavior determination result corresponding to the identifier to be queried can be determined based on the object basic information, the target statistical analysis information and the target abnormal analysis result; the abnormal behavior determination result is sent to the client so that the client displays the abnormal behavior determination result on the information display interface. After determining the object basic information, the target statistical analysis information and the target abnormal analysis result, the server further performs abnormal detection processing on the object basic information and the statistical analysis information to obtain the abnormal behavior determination result corresponding to the identifier to be queried (for example: "Please note! The identifier to be queried has abnormal behavior!"), and sends the abnormal behavior determination result to the client, which can further improve the efficiency of abnormal transaction review.

[0149] S1706. The client displays the basic information of the object on an information display interface, and displays the target statistical analysis information on the information display interface according to the target anomaly analysis result.

[0150] In an embodiment of the present application, the client receives the object basic information, the target statistical analysis information and the target abnormal analysis result returned by the server, wherein the object basic information is associated with the identifier to be queried and is obtained by the server from the first information storage system, and the object basic information may include one or more of the basic information of the first object, the basic information of the second object and the management record information of the second object; the target statistical analysis information is obtained by the server performing data statistical analysis on the associated transaction data, the associated transaction data is associated with the identifier to be queried and is obtained by the server from the second information storage system according to the management time, and the statistical analysis information may include one or more of the transaction statistical information, the transaction situation analysis information and the transaction object analysis information; the management time is obtained from the management record information; the target abnormal analysis result is determined according to the weighted parameter and the target statistical analysis information, and the weighted parameter is determined according to the object basic information. After receiving the object basic information, the target statistical analysis information and the target abnormal analysis result returned by the server, the client displays the object basic information on the information display interface, and displays the statistical analysis information on the information display interface according to the target abnormal analysis result.

[0151] In one embodiment, the target statistical analysis information may include transaction situation analysis information, the transaction situation analysis information includes transaction description text analysis information, the transaction description text analysis information includes one or more transaction description texts and text data of each transaction description text, and the text data is abnormal text or normal text. Then, according to the target abnormal analysis result, the implementation method of displaying the statistical analysis information on the information display interface may be: displaying each transaction description text included in the transaction description text analysis information in the transaction description text display area, and the transaction description text display area is included in the information display interface; wherein, the transaction description text with the text attribute of abnormal text is displayed in the first display mode, and the transaction description text with the file attribute of normal text is displayed in the second display mode. The information display interface includes a transaction description text display area, in which the transaction description text with the text attribute of abnormal text will be displayed in the first display mode, and the transaction description text with the text attribute of normal text will be displayed in the second display mode. Using different display modes to display transaction description texts with different file attributes can make the abnormal text clearer, which is conducive to the auditor to locate the abnormal text more quickly and conduct further abnormal audit.

[0152] In one embodiment, the first display mode may be a dynamic display, and the second display mode may be a static display; or, the first display mode is a dynamic display, and the second display mode is a dynamic and highlighted display; or, the first display mode is a red font display, and the second display mode is a black font display; or, the first display mode is a shaded background with bold font display, and the second display mode is a colorless background with normal font display.

[0153] In one embodiment, the target statistical analysis information may also include various types of threshold judgment results. The implementation method of displaying the target statistical analysis information on the information display interface may be: the type with the threshold judgment result of "exceeding the threshold" is displayed in a third display mode, and the type with the threshold judgment result of "not exceeding the threshold" is displayed in a fourth display mode; wherein the third display mode is a shaded background display with a floating display of the threshold judgment result, and the fourth display mode is a colorless background display. Fig.18 A method for displaying a threshold determination result exemplarily provided in an embodiment of the present application is shown. Fig.18 In the example, the statistical analysis information includes transaction situation analysis information and threshold judgment results of the transaction situation analysis information. The transaction situation analysis information is determined based on the transaction number analysis information. The transaction number analysis information includes statistical information of special number types, high-frequency number types, integer number types, general integer number types, and specific number types. Among them, in the special number type in the transaction number analysis information, the number of times the target transaction number is "666" is "300", the total is "199800", and its threshold judgment result is "exceeding the threshold", it is displayed in a shaded background display mode, and its threshold judgment result is displayed in a floating manner, for example Fig.18 As shown in: when the cursor is within the display range of the target transaction number, the threshold judgment result is displayed, and when the cursor is outside the display range of the target transaction number, the threshold judgment result is not displayed. The method provided in the embodiment of the present application can further highlight abnormal data, which is conducive to improving the efficiency of abnormal transaction review.

[0154] Based on the above embodiments, the beneficial effects of the present application are as follows: the information query method provided by the embodiments of the present application can obtain information and transaction data associated with the identifier to be queried across systems according to the identifier to be queried, thereby reducing the steps of information query and improving the efficiency of information query; it can obtain related transaction data in a targeted manner according to the basic information of the object, reducing redundant data in the transaction data and improving the efficiency of data query and data processing; it can determine statistical analysis information containing information of multiple dimensions according to the related transaction data, which can make the information more concise and accurate, and is conducive to assisting auditors to quickly determine abnormal transaction data, effectively improving the efficiency of abnormal transaction auditing; at the same time, it enables the client to display the processed statistical analysis information instead of directly The related transaction data directly obtained can effectively ensure the security and confidentiality of the data; the abnormal analysis results determined according to the basic information of the object and the statistical analysis information can preliminarily identify the data with abnormalities, thereby improving the efficiency of abnormal review; in addition, the method provided in the embodiment of the present application can also determine the abnormal behavior judgment results according to the basic information of the object and the statistical analysis information, thereby realizing the automation of abnormal transaction review and effectively saving labor costs; in the information display interface, the method provided in the embodiment of the present application adopts different display methods to display information of different attributes, which can better highlight the abnormal information, facilitate the rapid positioning of abnormal transaction data, and carry out the next step of review, thereby improving the efficiency of abnormal transaction review.

[0155] See also Fig.19 , Fig.19 A schematic block diagram of an information query device provided as an example in an embodiment of the present application. The information query device can implement the relevant functions of the above-mentioned server. The device includes:

[0156] The transceiver unit 1901 is used to receive a query request from a client, where the query request includes an identifier to be queried;

[0157] A query unit 1902 is configured to obtain, in response to the query request, basic object information associated with the identifier to be queried from the first information storage system, where the basic object information includes one or more of basic information of the first object, basic information of the second object, and management record information of the second object;

[0158] The query unit 1902 is further configured to obtain the management time corresponding to the second object from the management record information, and obtain the associated transaction data associated with the identifier to be queried from the second information storage system according to the management time;

[0159] The processing unit 1903 is used to determine target statistical analysis information according to the associated transaction data, where the target statistical analysis information includes one or more of transaction statistical information, transaction situation analysis information and transaction object analysis information;

[0160] The processing unit 1903 is further configured to determine a weighting parameter corresponding to the target statistical analysis information according to the object basic information, and perform an abnormality analysis on the target statistical analysis information according to the weighting parameter to obtain a target abnormality analysis result;

[0161] The transceiver unit 1901 is also used to send the object basic information, the target statistical analysis information and the target abnormality analysis result to the client, so that the client displays the object basic information on the information display interface, and displays the target statistical analysis information on the information display interface according to the target abnormality analysis result.

[0162] In one embodiment, when the query unit 1902 obtains the related transaction data associated with the identifier to be queried from the second information storage system according to the management time, it is specifically used to: determine the reference transaction time according to the management time and the set time length; obtain the related transaction data matching the identifier to be queried from the second information storage system according to the reference transaction time, and the transaction time corresponding to the related transaction data matches the reference transaction time.

[0163] In one embodiment, the related transaction data includes multiple transaction data, each transaction data includes a transaction time. When the processing unit 1903 determines the target statistical analysis information based on the related transaction data, it is specifically used to: obtain the abnormal transaction time, and the transaction occurring within the abnormal transaction time is highly likely to be an abnormal transaction; according to the transaction time included in each transaction data, obtain matching transaction data matching the abnormal transaction time from the multiple transaction data included in the related transaction data; perform data analysis processing on the matching transaction data to obtain transaction situation analysis information, and determine the target statistical analysis information based on the transaction situation analysis information.

[0164] In one embodiment, all or part of the multiple transaction data include transaction description texts. When the processing unit 1903 performs data analysis on the matching transaction data to obtain transaction situation analysis information, it is specifically used to: obtain each transaction description text included in the matching transaction data; perform attribute analysis on the each transaction description text to determine the text attribute of the each transaction description text, where the text attribute is abnormal text or normal text; determine the transaction description text analysis information based on the each transaction description text and the text attribute of the each transaction description text, and determine the transaction situation analysis information based on the transaction description text analysis information.

[0165] In one embodiment, each piece of transaction data also includes the number of transactions. When the processing unit 1903 performs data analysis on the matching transaction data to obtain transaction situation analysis information, it is specifically used to: obtain the number of transactions included in each piece of the matching transaction data; perform statistical processing on the obtained number of transactions to determine statistical information corresponding to each number type, the number type including one or more of a special number type, a high-frequency number type, an integer number type, a pan-integer number type, and a specific number type; determine the transaction number analysis information according to the statistical information corresponding to each number type, and determine the transaction situation analysis information according to the transaction number analysis information.

[0166] In one embodiment, the target statistical analysis information includes the transaction situation analysis information, and the transaction situation analysis information includes the transaction number analysis information. When the processing unit 1903 determines the weighted parameters corresponding to the target statistical analysis information according to the object basic information, and performs an abnormality analysis on the target statistical analysis information according to the weighted parameters to obtain a target abnormality analysis result, it is specifically used to: obtain the number of management times corresponding to the second object from the management record information included in the object basic information; determine the weighted parameters corresponding to the transaction number analysis information included in the target statistical analysis information according to the management times; perform an abnormality analysis on the transaction number analysis information according to the weighted parameters corresponding to the transaction number analysis information to obtain the abnormality analysis result of the transaction number analysis information; and determine the target abnormality analysis result according to the abnormality analysis result of the transaction number analysis information.

[0167] In one embodiment, the related transaction data includes multiple transaction data, each transaction data includes a transaction object. When determining the target statistical analysis information based on the related transaction data, the processing unit 1903 is specifically used to: obtain each transaction object included in the related transaction data, and obtain the transaction object information of each transaction object; perform statistical processing on the obtained transaction object information to determine the statistical information corresponding to each object feature, the object feature including one or more of attribute features, management record features, and transaction address features; determine the transaction object analysis information based on the statistical information corresponding to each object feature, and determine the target statistical analysis information based on the transaction object analysis information.

[0168] See also Fig. 20 , Fig. 20 A schematic block diagram of another information query device provided as an example in an embodiment of the present application. The information query device can implement the relevant functions of the above-mentioned client. The device includes:

[0169] The display unit 2001 is used to display an information query interface, wherein the information query interface includes a query identifier input area;

[0170] A generating unit 2002, configured to generate a query request according to the identifier to be queried input in the query identifier input area, and send the query request to a server;

[0171] The receiving unit 2003 is used to receive the object basic information, target statistical analysis information and target abnormality analysis result returned by the server; the object basic information is associated with the identifier to be queried and is obtained by the server from the first information storage system, and the object basic information includes one or more of the basic information of the first object, the basic information of the second object and the management record information of the second object; the target statistical analysis information is obtained by the server performing data statistical analysis on the associated transaction data, the associated transaction data is associated with the identifier to be queried and is obtained by the server from the second information storage system according to the management time, and the management time is obtained from the management record information, and the target statistical analysis information includes one or more of the transaction statistical information, the transaction situation analysis information and the transaction object analysis information; the target abnormality analysis result is determined according to the weighting parameter and the target statistical analysis information, and the weighting parameter is determined according to the object basic information;

[0172] The display unit 2001 is further used to display the basic information of the object on the information display interface, and to display the target statistical analysis information on the information display interface according to the target abnormality analysis result.

[0173] In one embodiment, the target statistical analysis information includes the transaction situation analysis information, the transaction situation analysis information includes transaction description text analysis information, the transaction description text analysis information includes one or more transaction description texts and text attributes of each of the transaction description texts, the text attributes are abnormal text or normal text, and when the display unit 2001 displays the target statistical analysis information in the information display interface according to the target abnormal analysis result, it is specifically used to: display each transaction description text included in the transaction description text analysis information in a transaction description text display area, and the transaction description text display area is included in the information display interface; wherein, the transaction description text with the text attribute of abnormal text is displayed in a first display mode, and the transaction description text with the text attribute of normal text is displayed in a second display mode.

[0174] In one embodiment, the first display mode is dynamic display, and the second display mode is static display; or, the first display mode is dynamic display, and the second display mode is dynamic and highlighted display.

[0175] It can be understood that the functions of each functional unit of the information query device of the embodiment of the present application can be specifically implemented according to the information query method in the above method embodiment, and its specific implementation process can refer to the relevant description in the above information query method embodiment, which will not be repeated here.

[0176] Based on the above embodiments, the beneficial effects of the present application are as follows: the information query method provided by the embodiments of the present application can obtain information and transaction data associated with the identifier to be queried across systems according to the identifier to be queried, thereby reducing the steps of information query and improving the efficiency of information query; it can obtain related transaction data in a targeted manner according to the basic information of the object, reducing redundant data in the transaction data and improving the efficiency of data query and data processing; it can determine statistical analysis information containing information of multiple dimensions according to the related transaction data, which can make the information more concise and accurate, and is conducive to assisting auditors to quickly determine abnormal transaction data, effectively improving the efficiency of abnormal transaction auditing; at the same time, it enables the client to display the processed statistical analysis information instead of directly The related transaction data directly obtained can effectively ensure the security and confidentiality of the data; the abnormal analysis results determined according to the basic information of the object and the statistical analysis information can preliminarily identify the data with abnormalities, thereby improving the efficiency of abnormal review; in addition, the method provided in the embodiment of the present application can also determine the abnormal behavior judgment results according to the basic information of the object and the statistical analysis information, thereby realizing the automation of abnormal transaction review and effectively saving labor costs; in the information display interface, the method provided in the embodiment of the present application adopts different display methods to display information of different attributes, which can better highlight the abnormal information, facilitate the rapid positioning of abnormal transaction data, and carry out the next step of review, thereby improving the efficiency of abnormal transaction review.

[0177] See also Fig.21 , Fig.21 A schematic block diagram of a computer device provided as an example in an embodiment of the present application. The computer device described in the embodiment of the present application includes: a processor 2101, a communication interface 2102, and a memory 2103. Among them, the processor 2101, the communication interface 2102, and the memory 2103 can be connected via a bus or other means, and the embodiment of the present application takes the connection via a bus as an example.

[0178] Among them, the processor 2101 (or CPU (Central Processing Unit)) is the computing core and control core of the computer device, which can parse various instructions in the computer device and process various data of the computer device. For example, the CPU can be used to parse the power on and off instructions sent by the user to the computer device, and control the computer device to perform power on and off operations; for another example, the CPU can transmit various interactive data between the internal structures of the computer device, and so on. The communication interface 2102 can optionally include a standard wired interface, a wireless interface (such as Wi-Fi, a mobile communication interface, etc.), which is controlled by the processor 2101 to send and receive data. The memory 2103 (Memory) is a memory device in the computer device for storing programs and data. It can be understood that the memory 2103 here can include both the built-in memory of the computer device and the extended memory supported by the computer device. The memory 2103 provides a storage space, which stores the operating system of the computer device, which may include but is not limited to: Android system, iOS system, Windows Phone system, etc., and this application does not limit this.

[0179] In a feasible embodiment, the computer device may correspond to the server described above. At this time, the processor 2101 executes the following operations by running the executable program code in the memory 2103:

[0180] Receiving a query request from a client, wherein the query request includes an identifier to be queried;

[0181] In response to the query request, acquiring basic object information associated with the identifier to be queried from the first information storage system, the basic object information including one or more of basic information of the first object, basic information of the second object, and management record information of the second object;

[0182] Acquire the management time corresponding to the second object from the management record information, and acquire the associated transaction data associated with the identifier to be queried from the second information storage system according to the management time;

[0183] Determine target statistical analysis information according to the associated transaction data, wherein the target statistical analysis information includes one or more of transaction statistical information, transaction situation analysis information and transaction object analysis information;

[0184] Determine a weighting parameter corresponding to the target statistical analysis information according to the object basic information, and perform an abnormality analysis on the target statistical analysis information according to the weighting parameter to obtain a target abnormality analysis result;

[0185] The object basic information, the target statistical analysis information and the target abnormality analysis result are sent to the client, so that the client displays the object basic information on an information display interface, and displays the target statistical analysis information on the information display interface according to the target abnormality analysis result.

[0186] In one embodiment, when the processor 2101 obtains the related transaction data associated with the identifier to be queried from the second information storage system according to the management time, it is specifically used to: determine the reference transaction time according to the management time and the set time length; obtain the related transaction data matching the identifier to be queried from the second information storage system according to the reference transaction time, and the transaction time corresponding to the related transaction data matches the reference transaction time.

[0187] In one embodiment, the associated transaction data includes multiple transaction data, each transaction data includes a transaction time; when the processor 2101 determines the target statistical analysis information based on the associated transaction data, it is specifically used to: obtain the transaction abnormality time, and the transaction occurring within the transaction abnormality time is highly likely to be an abnormal transaction; according to the transaction time included in each transaction data, obtain matching transaction data matching the transaction abnormality time from the multiple transaction data included in the associated transaction data; perform data analysis processing on the matching transaction data to obtain transaction situation analysis information, and determine the target statistical analysis information based on the transaction situation analysis information.

[0188] In one embodiment, all or part of the multiple transaction data include transaction description texts; when the processor 2101 performs data analysis on the matching transaction data to obtain transaction situation analysis information, it is specifically used to: obtain each transaction description text included in the matching transaction data; perform attribute analysis on the each transaction description text to determine the text attribute of the each transaction description text, and the text attribute is abnormal text or normal text; determine the transaction description text analysis information according to the each transaction description text and the text attribute of the each transaction description text, and determine the transaction situation analysis information according to the transaction description text analysis information.

[0189] In one embodiment, each piece of transaction data also includes the number of transactions; when the processor 2101 performs data analysis on the matching transaction data to obtain transaction situation analysis information, it is specifically used to: obtain the number of transactions included in each piece of the matching transaction data; perform statistical processing on the obtained number of transactions to determine statistical information corresponding to each number type, the number type including one or more of a special number type, a high-frequency number type, an integer number type, a pan-integer number type, and a specific number type; determine the transaction number analysis information based on the statistical information corresponding to each number type, and determine the transaction situation analysis information based on the transaction number analysis information.

[0190] In one embodiment, the target statistical analysis information includes the transaction situation analysis information, and the transaction situation analysis information includes the transaction number analysis information; when the processor 2101 determines the weighted parameters corresponding to the target statistical analysis information according to the object basic information, and performs an abnormality analysis on the target statistical analysis information according to the weighted parameters to obtain a target abnormality analysis result, it is specifically used to: obtain the number of management times corresponding to the second object from the management record information included in the object basic information; determine the weighted parameters corresponding to the transaction number analysis information included in the target statistical analysis information according to the management times; perform an abnormality analysis on the transaction number analysis information according to the weighted parameters corresponding to the transaction number analysis information to obtain the abnormality analysis result of the transaction number analysis information; determine the target abnormality analysis result according to the abnormality analysis result of the transaction number analysis information.

[0191] In one embodiment, the related transaction data includes multiple transaction data, each transaction data includes a transaction object; when the processor 2101 determines the target statistical analysis information based on the related transaction data, it is specifically used to: obtain each transaction object included in the related transaction data, and obtain the transaction object information of each transaction object; perform statistical processing on the acquired transaction object information to determine the statistical information corresponding to each object feature, the object feature includes one or more of attribute features, management record features, and transaction address features; determine the transaction object analysis information based on the statistical information corresponding to each object feature, and determine the target statistical analysis information based on the transaction object analysis information.

[0192] In a feasible embodiment, the computer device may correspond to the client described above. At this time, the processor 2101 executes the following operations by running the executable program code in the memory 2103:

[0193] Displaying an information query interface, wherein the information query interface includes a query identifier input area;

[0194] Generate a query request according to the identifier to be queried input into the query identifier input area, and send the query request to the server;

[0195] Receive object basic information, target statistical analysis information and target abnormality analysis results returned by the server; the object basic information is associated with the identifier to be queried and is obtained by the server from the first information storage system, and the object basic information includes one or more of the basic information of the first object, the basic information of the second object and the management record information of the second object; the target statistical analysis information is obtained by the server performing data statistical analysis on the associated transaction data, the associated transaction data is associated with the identifier to be queried and is obtained by the server from the second information storage system according to the management time, the management time is obtained from the management record information, and the target statistical analysis information includes one or more of the transaction statistical information, the transaction situation analysis information and the transaction object analysis information; the target abnormality analysis result is determined according to the weighting parameter and the target statistical analysis information, and the weighting parameter is determined according to the object basic information;

[0196] The object basic information is displayed on the information display interface, and the target statistical analysis information is displayed on the information display interface according to the target abnormality analysis result.

[0197] In one embodiment, the target statistical analysis information includes the transaction situation analysis information, the transaction situation analysis information includes transaction description text analysis information, the transaction description text analysis information includes one or more transaction description texts and text attributes of each of the transaction description texts, and the text attributes are abnormal text or normal text; when the processor 2101 displays the target statistical analysis information in the information display interface according to the target abnormal analysis result, it is specifically used to: display each transaction description text included in the transaction description text analysis information in the transaction description text display area, and the transaction description text display area is included in the information display interface; wherein, the transaction description text with the text attribute of abnormal text is displayed in a first display mode, and the transaction description text with the text attribute of normal text is displayed in a second display mode.

[0198] In one embodiment, the first display mode is dynamic display, and the second display mode is static display; or, the first display mode is dynamic display, and the second display mode is dynamic and highlighted display.

[0199] In a specific implementation, the processor 2101, communication interface 2102 and memory 2103 described in the embodiment of the present application can execute the implementation method of the computer device described in an information query method provided in an embodiment of the present application, and can also execute the implementation method described in an information query device provided in an embodiment of the present application, which will not be repeated here.

[0200] Based on the above embodiments, the beneficial effects of the present application are as follows: the information query method provided by the embodiments of the present application can obtain information and transaction data associated with the identifier to be queried across systems according to the identifier to be queried, thereby reducing the steps of information query and improving the efficiency of information query; it can obtain related transaction data in a targeted manner according to the basic information of the object, reducing redundant data in the transaction data and improving the efficiency of data query and data processing; it can determine statistical analysis information containing information of multiple dimensions according to the related transaction data, which can make the information more concise and accurate, and is conducive to assisting auditors to quickly determine abnormal transaction data, effectively improving the efficiency of abnormal transaction auditing; at the same time, it enables the client to display the processed statistical analysis information instead of directly The related transaction data directly obtained can effectively ensure the security and confidentiality of the data; the abnormal analysis results determined according to the basic information of the object and the statistical analysis information can preliminarily identify the data with abnormalities, thereby improving the efficiency of abnormal review; in addition, the method provided in the embodiment of the present application can also determine the abnormal behavior judgment results according to the basic information of the object and the statistical analysis information, thereby realizing the automation of abnormal transaction review and effectively saving labor costs; in the information display interface, the method provided in the embodiment of the present application adopts different display methods to display information of different attributes, which can better highlight the abnormal information, facilitate the rapid positioning of abnormal transaction data, and carry out the next step of review, thereby improving the efficiency of abnormal transaction review.

[0201] The embodiment of the present application also provides a computer-readable storage medium, in which a computer program is stored, and when the computer program is run on a computer, the computer executes the information query method as described in the embodiment of the present application. The specific implementation method can be referred to the above description, and will not be repeated here.

[0202] The embodiment of the present application also provides a computer program product, which includes a computer program or a computer instruction, and the computer program or the computer instruction is stored in a computer-readable storage medium. The processor of the computer device reads the computer program or the computer instruction from the computer-readable storage medium, and the processor executes the computer program or the computer instruction, so that the computer device performs the information query method as described in the embodiment of the present application. The specific implementation method can be referred to the above description, which will not be repeated here.

[0203] It should be noted that, for the above-mentioned various method embodiments, for the sake of simplicity of description, they are all expressed as a series of action combinations, but those skilled in the art should be aware that this application is not limited by the order of the actions described, because according to this application, some steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by this application.

[0204] A person skilled in the art may understand that all or part of the steps in the various methods of the above embodiments may be completed by instructing related hardware through a program, and the program may be stored in a computer-readable storage medium, and the storage medium may include: a flash drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0205] The above disclosure is only part of the embodiments of the present application, which certainly cannot be used to limit the scope of rights of the present application. Therefore, equivalent changes made according to the claims of the present application are still within the scope covered by the present application.

Claims

1. An information query method, characterized in that: The method comprises: Receiving a query request from a client, wherein the query request includes an identifier to be queried; In response to the query request, acquiring basic object information associated with the identifier to be queried from the first information storage system, the basic object information including one or more of basic information of the first object, basic information of the second object, and management record information of the second object; Acquire the management time corresponding to the second object from the management record information, and acquire the associated transaction data associated with the identifier to be queried from the second information storage system according to the management time; Determine target statistical analysis information according to the associated transaction data, wherein the target statistical analysis information includes one or more of transaction statistical information, transaction situation analysis information and transaction object analysis information; Determine a weighting parameter corresponding to the target statistical analysis information according to the object basic information, and perform an abnormality analysis on the target statistical analysis information according to the weighting parameter to obtain a target abnormality analysis result; The object basic information, the target statistical analysis information and the target abnormality analysis result are sent to the client, so that the client displays the object basic information on an information display interface, and displays the target statistical analysis information on the information display interface according to the target abnormality analysis result.

2. The method according to claim 1, characterized in that The acquiring, from the second information storage system according to the management time, the associated transaction data associated with the identifier to be queried includes: Determine the reference transaction time according to the management time and the set time length; The associated transaction data matching the identifier to be queried is acquired from the second information storage system according to the reference transaction time, and the transaction time corresponding to the associated transaction data matches the reference transaction time.

3. The method according to claim 1, characterized in that The associated transaction data includes multiple transaction data, each transaction data includes a transaction time; the target statistical analysis information is determined according to the associated transaction data, including: Obtaining the abnormal transaction time, where transactions occurring within the abnormal transaction time are highly likely to be abnormal transactions; According to the transaction time included in each piece of transaction data, acquiring matching transaction data that matches the abnormal transaction time from the multiple pieces of transaction data included in the associated transaction data; The matching transaction data is subjected to data analysis and processing to obtain transaction situation analysis information, and target statistical analysis information is determined based on the transaction situation analysis information.

4. The method according to claim 3, characterized in that All or part of the transaction data in the plurality of transaction data include transaction description text; and the data analysis and processing of the matching transaction data to obtain transaction situation analysis information includes: Acquire each transaction description text included in the matching transaction data; Performing attribute analysis on each of the transaction description texts to determine a text attribute of each of the transaction description texts, wherein the text attribute is an abnormal text or a normal text; Transaction description text analysis information is determined according to the transaction description texts and text attributes of the transaction description texts, and transaction situation analysis information is determined according to the transaction description text analysis information.

5. The method according to claim 3, characterized in that: Each piece of transaction data also includes the number of transactions; the data analysis and processing of the matching transaction data to obtain transaction situation analysis information includes: Obtaining the number of transactions included in each piece of matching transaction data; Performing statistical processing on the acquired transaction numbers to determine statistical information corresponding to each number type, wherein the number type includes one or more of a special number type, a high-frequency number type, an integer number type, a pan-integer number type, and a specific number type; Transaction number analysis information is determined according to the statistical information corresponding to each number type, and transaction situation analysis information is determined according to the transaction number analysis information.

6. The method according to claim 5, characterized in that The target statistical analysis information includes the transaction situation analysis information, and the transaction situation analysis information includes the transaction number analysis information; The determining, according to the object basic information, a weighted parameter corresponding to the target statistical analysis information, and performing an abnormality analysis on the target statistical analysis information according to the weighted parameter to obtain a target abnormality analysis result includes: Acquire the management times corresponding to the second object from the management record information included in the object basic information; Determine, according to the management times, a weighting parameter corresponding to the transaction number analysis information included in the target statistical analysis information; performing an abnormality analysis on the transaction number analysis information according to the weighted parameter corresponding to the transaction number analysis information to obtain an abnormality analysis result of the transaction number analysis information; The target abnormality analysis result is determined according to the abnormality analysis result of the transaction number analysis information.

7. The method according to any one of claims 1 to 6, characterized in that: The associated transaction data includes multiple transaction data, each of which includes a transaction object; and determining target statistical analysis information based on the associated transaction data includes: Acquire each transaction object included in the associated transaction data, and acquire transaction object information of each transaction object; Performing statistical processing on the acquired transaction object information to determine statistical information corresponding to each object feature, wherein the object feature includes one or more of an attribute feature, a management record feature, and a transaction address feature; The transaction object analysis information is determined according to the statistical information corresponding to the various object features, and the target statistical analysis information is determined according to the transaction object analysis information.

8. An information query method, characterized in that: The method comprises: Displaying an information query interface, wherein the information query interface includes a query identifier input area; Generate a query request according to the identifier to be queried input into the query identifier input area, and send the query request to the server; Receive object basic information, target statistical analysis information and target abnormality analysis results returned by the server; the object basic information is associated with the identifier to be queried and is obtained by the server from the first information storage system, and the object basic information includes one or more of the basic information of the first object, the basic information of the second object and the management record information of the second object; the target statistical analysis information is obtained by the server performing data statistical analysis on the associated transaction data, the associated transaction data is associated with the identifier to be queried and is obtained by the server from the second information storage system according to the management time, the management time is obtained from the management record information, and the target statistical analysis information includes one or more of the transaction statistical information, the transaction situation analysis information and the transaction object analysis information; the target abnormality analysis result is determined according to the weighting parameter and the target statistical analysis information, and the weighting parameter is determined according to the object basic information; The object basic information is displayed on the information display interface, and the target statistical analysis information is displayed on the information display interface according to the target abnormality analysis result.

9. The method according to claim 8, characterized in that The target statistical analysis information includes the transaction situation analysis information, the transaction situation analysis information includes transaction description text analysis information, the transaction description text analysis information includes one or more transaction description texts and text attributes of each of the transaction description texts, and the text attributes are abnormal text or normal text; The displaying of the target statistical analysis information in the information display interface according to the target abnormality analysis result includes: Displaying each transaction description text included in the transaction description text analysis information in a transaction description text display area, wherein the transaction description text display area is included in the information display interface; The transaction description text whose text attribute is abnormal text is displayed in the first display mode, and the transaction description text whose text attribute is normal text is displayed in the second display mode.

10. The method according to claim 9, characterized in that The first display mode is dynamic display, and the second display mode is static display; or, the first display mode is dynamic display, and the second display mode is dynamic and highlighted display.

11. An information query device, characterized in that: The method comprises a unit for executing the information query method according to any one of claims 1 to 7, or comprises a unit for executing the information query method according to any one of claims 8 to 10.

12. A computer device, characterized in that: include: A processor, a communication interface and a memory, wherein the processor, the communication interface and the memory are interconnected, wherein the memory stores an executable program code, and the processor is used to call the executable program code to implement the information query method as described in any one of claims 1-7, or to implement the information query method as described in any one of claims 8-10.

13. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, which, when executed on a computer, enable the computer to implement the information query method according to any one of claims 1 to 7, or the information query method according to any one of claims 8 to 10.

14. A computer program product, characterized in that The computer program product includes a computer program or a computer instruction, and when the computer program or the computer instruction is executed by a processor, the information query method according to any one of claims 1 to 7 is implemented, or the information query method according to any one of claims 8 to 10 is implemented.

Images