Member right protection method and device, electronic equipment and storage medium

Abstract

The invention provides a member right and interest protection method and device, electronic equipment and a storage medium, and the method comprises the steps: collecting the original behavior information of a first user account corresponding to target member right and interest; the original behavior information is connected in series according to a time sequence, and target behavior information after series connection is obtained; if at least one risk feature is identified from the target behavior information, determining that the first user account is a risk account; and if it is determined that the first user account is the risk account, monitoring a member right transfer behavior of the first user account. According to the invention, the original behavior information of the first user account to which the member rights belong is collected and analyzed, so that the risk account can be found in time, and the transfer behavior of the member rights can be monitored, thereby better preventing the illegal operation of black products, reducing the loss of the member rights, ensuring that the member can really enjoy the due member welfare and service, and improving the user experience. And the benefits of the company can be maintained, and the service quality and member satisfaction of the company are improved.

Description

Technical Field

[0001] The present disclosure relates to the technical field of member rights protection, and in particular to a member rights protection method, device, electronic device and storage medium. Background Art

[0002] With the development of digital services, membership rights have become an important business model, but the existence of black industries seriously threatens the security of member rights. Specifically, black industries attract users to order store products at low prices, and transfer member rights to cash out by defrauding member SMS verification codes or authorizing login to member accounts. The above behaviors seriously damage member rights. Summary of the invention

[0003] In view of this, in order to solve the above technical problems, the present disclosure provides a member rights protection method, device, electronic device and storage medium.

[0004] According to a first aspect of an embodiment of the present disclosure, a member rights protection method is provided, the member rights protection method comprising:

[0005] Collecting original behavior information of the first user account corresponding to the target member rights;

[0006] Concatenating the original behavior information in chronological order to obtain concatenated target behavior information;

[0007] If at least one risk feature is identified from the target behavior information, determining the first user account as a risk account;

[0008] If it is determined that the first user account is a risky account, the member rights transfer behavior of the first user account is monitored.

[0009] Optionally, the risk feature includes at least one of the following features:

[0010] Features of remote login, abnormal aggregation of login devices, abnormal interval length, remote operation, and abnormal aggregation of ordered products;

[0011] Among them, the off-site login feature characterizes that the first user account logged in off-site, the abnormal login device aggregation feature characterizes that the login devices of the first user account all have jailbreak characteristics, the abnormal interval time feature characterizes that the interval time from login to order placement of the first user account is less than or equal to the set time, the off-site operation feature characterizes that the login address and order address of the first user account are consistent and are both off-site addresses, and the single product aggregation abnormality feature characterizes the existence of multiple abnormal ordering behaviors within the set time range.

[0012] Optionally, after monitoring the member rights transfer behavior of the first user account, the member rights protection method includes:

[0013] If the member rights transfer behavior of the first user account is monitored, the member rights transfer information of the first user account is collected;

[0014] Based on the member benefit transfer information and the target behavior information, determining whether the member benefit transfer behavior of the first user account is operated by the user himself;

[0015] If it is determined that the membership rights transfer behavior of the first user account is not operated by the user himself, the unfinished membership rights transfer behavior will be rejected and the completed membership rights transfer content will be returned.

[0016] Optionally, the member benefit transfer information includes at least one of the following:

[0017] The time of membership rights transfer, the user ID of the second user account that receives the transferred membership rights, the time of receipt of the transferred membership rights by the second user account, the collection location of the second user account that receives the transferred membership rights, the user portrait of the second user account that receives the transferred membership rights, and the transfer order information.

[0018] Optionally, the determining that the membership rights transfer behavior of the first user account is not operated by the user himself includes at least one of the following:

[0019] Determine the time aggregation for the transfer of member benefits;

[0020] Determine that there are off-site operations and clusters at the location where the member's rights are transferred;

[0021] Determining that the login device of the first user account has jailbreak characteristics and is clustered;

[0022] Determining that the second user account that receives the transferred membership benefits has no intersection with the operation location of the first user account;

[0023] Make sure that the second user accounts that receive the transferred membership benefits are dispersed and not concentrated.

[0024] Optionally, the member rights protection method includes:

[0025] If it is determined that the membership rights transfer behavior of the first user account is not operated by the user himself, the owner of the first user account is notified that there is an abnormality in the membership rights transfer behavior.

[0026] Optionally, the original behavior information includes at least one of the following information:

[0027] The login time of the first user account, the login location of the first user account, the login device identifier of the first user account, the user portrait of the first user account, the member's ordered product information, the member's order time, and the member's order city.

[0028] According to a second aspect of an embodiment of the present disclosure, a member rights protection device is provided, the member rights protection device comprising:

[0029] A data collection module, used to collect original behavior information of the first user account corresponding to the target member rights;

[0030] A risk control module is used to concatenate the original behavior information in chronological order to obtain the concatenated target behavior information; it is also used to determine that the first user account is a risk account if at least one risk feature is identified from the target behavior information; it is also used to monitor the member rights transfer behavior of the first user account if it is determined that the first user account is a risk account.

[0031] According to a third aspect of an embodiment of the present disclosure, an electronic device is provided, the electronic device comprising:

[0032] processor;

[0033] a memory for storing instructions executable by the processor;

[0034] Wherein, the processor is configured to execute the member rights protection method as described in any one of the first aspects.

[0035] According to a fourth aspect of an embodiment of the present disclosure, a non-temporary computer-readable storage medium is provided. When instructions in the storage medium are executed by a processor of an electronic device, the electronic device is enabled to execute the member rights protection method as described in any one of the first aspects.

[0036] The technical solution provided by the embodiments of the present disclosure may include the following beneficial effects: the present disclosure collects the original behavior information of the first user account to which the member rights belong, and concatenates the collected original behavior information in chronological order to obtain the concatenated target behavior information, and then performs risk analysis based on the target behavior information. It can timely discover risky accounts and monitor the transfer of member rights and interests, so as to better prevent illegal operations of black industries, reduce the loss of member rights and interests, ensure that members can truly enjoy the member benefits and services they deserve, and can safeguard the interests of the company and improve the company's service quality and member satisfaction.

[0037] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0039] Figure 1 The figure is a flow chart of a method for protecting member rights and interests according to an exemplary embodiment.

[0040] Figure 2 The figure is a block diagram of a device for protecting member rights and interests according to an exemplary embodiment.

[0041] Figure 3 is a block diagram of an electronic device according to an exemplary embodiment. DETAILED DESCRIPTION

[0042] The following will describe the implementation methods of the present application with reference to the accompanying drawings and preferred embodiments. Those skilled in the art can easily understand other advantages and effects of the present application from the contents disclosed in this specification. The present application can also be implemented or applied through other different specific implementation methods, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present application. It should be understood that the preferred embodiments are only for illustrating the present application, not for limiting the scope of protection of the present application.

[0043] It should be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present application, and thus the drawings only show components related to the present application rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed at will, and the component layout may also be more complicated.

[0044] To facilitate understanding of the embodiments of the present application, further explanation will be given below with reference to specific embodiments in conjunction with the accompanying drawings. The embodiments do not constitute a limitation on the embodiments of the present application.

[0045] The embodiments of the present disclosure provide a member rights protection method, device, electronic device and storage medium. The present disclosure collects the original behavior information of the first user account to which the member rights belong, and concatenates the collected original behavior information in chronological order to obtain the concatenated target behavior information, and then performs risk analysis based on the target behavior information, so as to timely discover risky accounts and monitor the transfer of member rights, so as to better prevent illegal operations of black industries, reduce the loss of member rights, ensure that members can truly enjoy the member benefits and services they deserve, and safeguard the interests of the company, and improve the company's service quality and member satisfaction.

[0046] In an exemplary embodiment, a member rights protection method is provided, which can be applied to an electronic device. Figure 1 As shown, the method may include:

[0047] S110, collecting original behavior information of the first user account corresponding to the target member rights and interests;

[0048] S120, concatenating the original behavior information in chronological order to obtain concatenated target behavior information;

[0049] S130: If at least one risk feature is identified from the target behavior information, determining that the first user account is a risk account;

[0050] S140: If it is determined that the first user account is a risk account, member rights transfer behavior of the first user account is monitored.

[0051] In step S110, the membership rights may refer to the rights of video members, the rights of online shopping platform members, or other membership rights, without limitation. For example, the membership rights may be the rights of senior members of a specific platform, including but not limited to additional storage space, priority service, discounts, etc.

[0052] In this step, the original behavior information of the first user account corresponding to the target membership rights can be collected through the system logs, database records and user behavior monitoring tools of the platform to which the membership rights belong. The first user account corresponding to the target membership rights is the user account to which the target membership rights belong, that is, the first user account has the above-mentioned target membership rights.

[0053] The original behavior information may include at least one of the following:

[0054] The login time of the first user account, the login location of the first user account, the login device identifier of the first user account, the user portrait of the first user account, the member's ordered product information, the member's order time, and the member's order city.

[0055] It should be noted that, in addition to the above information, the original behavior information may also be configured to include other information according to actual needs, and there is no limitation on this.

[0056] Among them, for the login time of the first user account, the system continuously records the specific time of each login. If there are frequent logins at abnormal time periods (such as abnormal times such as early morning), it will be used as an indicator of potential risk. The login location of the first user account can be determined by IP address and other methods. If the account has multiple login locations in different regions in a short period of time, or the login location is very different from the user's usual location, there may be risks.

[0057] Among them, the record of the login device identifier of the first user account helps to find out whether the account frequently switches logins on multiple different devices. If an account is logged in using multiple different devices in a short period of time, there may be a risk of theft or abnormal use. The user profile of the first user account may include the user's age, gender, consumption habits, etc. If the behavior of the account is seriously inconsistent with the user profile, for example, a person who usually watches variety shows suddenly watches a lot of movies and TV series, there may be a risk.

[0058] Among them, member order product information can record the specific products purchased by users. If there are a large number of abnormal product purchase behaviors, such as purchasing high-value products that are not related to the user's historical purchase records, or frequently purchasing specific products for resale in a short period of time, it can be regarded as a risk signal. The records of member order time and order city can be combined for analysis. For example, if there are multiple orders from different cities in a short period of time, or the order time does not match the user's normal shopping time pattern, there may be risks.

[0059] In step S120, after obtaining the original behavior information, the original behavior information can be concatenated in time order to obtain the concatenated target behavior information. For example, the login time, login location, login device identification, user portrait, member order product, member order time, member order city and other information are arranged in a timeline to form the concatenated target behavior information.

[0060] In step S130, after obtaining the target behavior information, feature analysis is performed based on the target behavior information. If at least one risk feature is identified from the target behavior information, the first user account is determined to be a risky account.

[0061] The risk characteristics may include at least one of the following:

[0062] Features of remote login, abnormal clustering of login devices, abnormal interval duration, remote operation, and abnormal clustering of ordered products.

[0063] Among them, the off-site login feature characterizes that the first user account logs in from an off-site location, the abnormal login device aggregation feature characterizes that the login devices of the first user account all have jailbreak characteristics, the abnormal interval time feature characterizes that the interval time from login to order placement of the first user account is less than or equal to the set time, the off-site operation feature characterizes that the login address and order address of the first user account are consistent and are both off-site addresses, and the single product aggregation abnormality feature characterizes that there are multiple abnormal ordering behaviors within the set time range.

[0064] In some embodiments,

[0065] The collected original behavior information of the first user account is concatenated in chronological order. For example, the login time, login location, login device identification, user portrait, member ordered products, member order time, member order city and other information are arranged in a timeline to form the concatenated target behavior information.

[0066] Then, the target behavior information is analyzed for characteristics. This implementation can analyze the characteristics of remote login, abnormal characteristics of login device aggregation, abnormal characteristics of interval duration, remote operation characteristics, and abnormal characteristics of ordered product aggregation.

[0067] Different-region login feature: Check whether the target behavior information contains the first user account logged in from different regions. If multiple login records from different regions appear in a short period of time, it is determined that the different-region login feature exists.

[0068] Login device aggregation abnormal characteristics: Detect login devices to determine whether they all have jailbreak characteristics. If the login devices of the first user account are generally jailbroken, it indicates that there may be risks, and it is determined that the login device aggregation abnormal characteristics exist.

[0069] Abnormal interval time feature: Calculate the time interval from the first user account login to order placement. If the interval time is less than or equal to the set time, for example, the set time is 1 minute, and the user completes the login and order operations in a very short time, there may be abnormal behavior, and it is determined that the abnormal interval time feature exists.

[0070] Off-site operation feature: Compare the login address and order address of the first user account. If the two are consistent and both are off-site addresses, it means there may be a risk and the off-site operation feature is determined to exist.

[0071] Abnormal order product clustering characteristics: Check whether there are multiple abnormal order behaviors within the set time range. For example, if a user continuously orders a large number of high-value products or products that are completely inconsistent with the user's historical purchase records within an hour, it is determined that abnormal order product clustering characteristics exist.

[0072] In this implementation, if at least one of the above risk characteristics is identified from the target behavior information, the first user account is determined to be a risky account.

[0073] It should be noted that in addition to the above-mentioned methods, risk accounts can also be judged by other methods, which are not limited to this. For example, feature extraction can be performed on the collected original behavior information, such as abnormal changes in login locations, too high or too low frequency of using membership benefits, abnormal prices in transaction records, etc. Then, the extracted features are input into the preset risk assessment model, and the model can determine whether the first user account is a risk account based on the preset threshold or classification rules. If the behavioral characteristics of the account match a known risk behavior pattern, or exceed the range of normal behavior, it is judged as a risk account. The risk assessment model can be based on a machine learning algorithm or a pre-set rule, which is not limited to this.

[0074] In step S140, after determining that the first user account is a risk account, the member rights transfer behavior of the first user account can be closely monitored. Monitoring includes but is not limited to observing whether the first user account attempts to transfer the member rights to other user accounts, whether the member rights are shared with other user accounts, etc. The member rights transferred in this embodiment may include basic rights, and may also include welfare rights attached to the member rights, which are not limited.

[0075] If it is monitored that the first user account has any membership rights transfer behavior, the membership rights transfer information of the first user account may be collected.

[0076] The user account that receives the transferred membership benefits may be recorded as the second user account. The membership benefits transfer information may include at least one of the following:

[0077] Member rights transfer time, user ID of the second user account, collection time of the second user account, collection location of the second user account, user portrait of the second user account, and transfer order information.

[0078] In some embodiments,

[0079] After determining that the first user account is a risk account, the behavior of the first user account can be continuously monitored. Once the member rights transfer behavior is found, the information collection mechanism is immediately triggered to collect the member rights transfer information. In this implementation, the user account that receives the transferred member rights can be recorded as the second user account. The member rights transfer information collected in this implementation may include the member rights transfer time, the user ID of the second user account, the collection time of the second user account, the collection location of the second user account, the user portrait of the second user account, and the transfer order information.

[0080] Member rights transfer time: accurately record the specific time point when the member rights are transferred from the first user account, so as to facilitate the subsequent analysis of the time pattern of the transfer behavior.

[0081] User ID of the second user account: obtain the unique ID of the second user account that receives the transferred membership benefits, which is used for further investigation and analysis of the account.

[0082] Collection time of the second user account: record the specific time when the second user account collects the membership benefits, so as to combine it with the membership benefits transfer time to analyze the timeliness of the transfer later.

[0083] The location where the second user account collects membership benefits is determined by IP address and other means.

[0084] User portrait of the second user account: Understand the user portrait information of the second user account, including age, gender, consumption habits, etc., so as to facilitate subsequent analysis of the correlation between the second user account and the first user account and determine whether the transfer behavior is reasonable.

[0085] Transfer order information: Detailed record of member benefit transfer order information, including the type, quantity, value, etc. of the transferred member benefits, to facilitate subsequent evaluation of the scale and impact of the transfer behavior.

[0086] This implementation method can effectively monitor and manage the transfer of member rights and interests by timely collecting member rights and interests transfer information, reduce risks, and maintain the normal operation of the platform and user rights and interests. This method provides strong support for member rights and interests management and can be continuously optimized and improved according to actual conditions.

[0087] It should be noted that the member rights transfer information may include not only the information mentioned in the above implementation mode, but also other information, which is not limited to this.

[0088] After obtaining the member rights transfer information, it is possible to determine whether the member rights transfer behavior of the first user account is operated by the user himself based on the member rights transfer information and the target behavior information. If it is determined that the member rights transfer behavior of the first user account is not operated by the user himself, the unfinished member rights transfer behavior is rejected, and the completed member rights transfer content is returned, and the owner of the first user account can be notified that there is an abnormality in the member rights transfer behavior.

[0089] Wherein, determining that the transfer of the membership rights and interests of the first user account is not performed by the user himself includes at least one of the following:

[0090] Determine the time aggregation for the transfer of member benefits;

[0091] Determine that there are off-site operations and clusters at the location where the member's rights are transferred;

[0092] Determining that the login device of the first user account has jailbreak characteristics and is clustered;

[0093] Determine that the second user account that receives the transferred membership benefits has no intersection with the operation location of the first user account;

[0094] It is determined that the second user account is dispersed and not aggregated.

[0095] In some embodiments,

[0096] When the first user account is monitored to have any membership rights transfer behavior, the membership rights transfer information is collected, including the membership rights transfer time, the user ID of the second user account, the collection time of the second user account, the collection location of the second user account, the user portrait of the second user account, the transfer order information, etc.

[0097] Then, it is determined whether the member rights transfer behavior of the first user account is operated by the user himself in combination with the target behavior information. The target behavior information refers to the login time, login location, login device identification, user portrait, member order product information, member order time, member order city and other information of the first user account connected in chronological order.

[0098] When determining whether the transfer of membership rights and interests of the first user account is performed by the user himself, analysis and judgment can be performed based on the following situations:

[0099] Membership benefit transfer time clustering: Check whether the membership benefit transfer time occurs in a short period of time. If multiple membership benefit transfer behaviors occur in a short period of time, it is considered that there is a membership benefit transfer time clustering. For example, if multiple membership benefit transfers occur continuously within a few minutes, which is inconsistent with the normal usage habits of the user account, it is considered that the membership benefit transfer behavior of the first user account may not be operated by the user himself.

[0100] The location where the member rights are transferred is remote and clustered: Analyze whether the location where the member rights are transferred is different from the usual login location of the first user account, and whether the transfer location is clustered. If the location where the member rights are transferred is remote, and multiple transfer behaviors are concentrated in the same remote location, it is determined that the location where the member rights are transferred is remote and clustered, which may be a risk. For example, the first user usually logs in in city A, but the member rights are concentrated in the same IP address in city B.

[0101] The login device of the first user account has jailbreak characteristics and is clustered: Detect whether the login device of the first user account is jailbroken, and whether multiple login behaviors are from devices with jailbreak characteristics. If a large number of logins are from jailbroken devices, it is determined that the login device of the first user account has jailbreak characteristics and is clustered, which may mean that the first user account is illegally controlled.

[0102] The second user account that received the transferred membership benefits has no intersection with the operation location of the first user account: Compare the collection location of the second user account with the operation location of the first user account such as the login location and order placement location. If the two have no intersection at all and there is no reasonable explanation, it is determined that the second user account that received the transferred membership benefits has no intersection with the operation location of the first user account, and there may be non-user operation.

[0103] Second user accounts are scattered without aggregation: Analyze whether the second user accounts that receive the transferred membership benefits are scattered in multiple different locations and have no obvious aggregation pattern. If the second user accounts are too scattered, confirm that the second user accounts are scattered without aggregation.

[0104] In this implementation, if it is determined that all of the above conditions are met, that is, it is determined that the time of member rights transfer is clustered, it is determined that the location of member rights transfer is operated in a different location and is clustered, it is determined that the login device of the first user account has jailbreak features and is clustered, it is determined that the second user account that receives the transferred member rights has no intersection with the operation location of the first user account, and it is determined that the second user account that receives the transferred member rights is scattered and not clustered, then it is determined that the member rights transfer behavior of the first user account is not operated by the user himself.

[0105] After determining that the membership rights transfer behavior of the first user account is not operated by the user himself, the following measures can be taken in this implementation:

[0106] Immediately refuse to execute any unfinished member rights transfer to prevent further illegal transfer of rights;

[0107] For completed member rights transfer, a return mechanism is initiated, for example, the transferred member rights are recovered through technical means and returned to the first user account.

[0108] In addition, in this implementation, relevant abnormal behavior information may be recorded for subsequent investigation and analysis.

[0109] Moreover, in this implementation, the owner of the first user account can be notified in time that there is an abnormality in the transfer of membership rights and interests, and the abnormal situation of the transfer of membership rights and interests can be informed, and the user can be advised to change the password, strengthen the account security settings, etc. For example, the owner of the first user account can be notified by SMS, or by other means, which is not limited.

[0110] Among them, for the member rights distribution platform, security protection measures can be strengthened for the first user account within a certain period of time (for example, one week or one month, without specific limitation), such as adding identity authentication links, improving the frequency and accuracy of risk monitoring, etc., to prevent similar illegal transfers from happening again.

[0111] This embodiment can accurately identify possible risky accounts and improve the platform's ability to prevent illegal activities by analyzing multi-dimensional behavioral data of user accounts. It can also timely discover and prevent the transfer of member rights and interests of risky accounts, process the refund of the transferred rights and interests and return them to the members themselves, and protect the legitimate rights and interests of users to the greatest extent. This embodiment can strengthen the monitoring and management of member rights and interests transfer behaviors, reduce the impact of illegal activities on the platform, improve the overall security and stability of the platform, better protect the member rights and interests of legitimate users from infringement, provide users with a safer and more reliable service environment, and improve user experience.

[0112] In addition, in this embodiment, in order to further ensure the accuracy and effectiveness of member rights management, the level of recovery / rejection can be monitored offline for the entire process. By analyzing and reviewing the level changes, possible accidental damage or omissions in the entire method can be discovered in a timely manner, thereby adjusting data features and optimizing system performance.

[0113] Among them, a daily offline monitoring mechanism can be established, that is, the recovery and rejection levels of member rights transfers are counted and recorded every day. This includes recording the number of unfinished member rights transfer behaviors rejected on the day, and the level of recovered member rights transfer content that was completed but determined to be not operated by the user himself. Then, compare the recovery / rejection levels on different dates.

[0114] If the magnitude of a certain date is found to have increased or decreased significantly, mark the date as a key focus date. If the magnitude has increased significantly, it may mean that the model has missed some black market activities, or that new black market methods have emerged. If the magnitude has decreased significantly, it may be that the method has accidentally harmed legitimate users, or that black market activities have temporarily decreased.

[0115] Review the marked key focus dates. Re-examine the member equity transfer behavior records, risk account judgment process, equity transfer judgment basis, etc. on that day. Check whether there are misjudgments in the user accounts whose equity is rejected or recovered. If it is found that legitimate users are mistakenly injured, it is necessary to adjust the feature analysis method in this method in a timely manner, such as modifying the features that need to be identified, to avoid similar situations from happening again.

[0116] At the same time, analyze whether there are any illegal activities that have not been detected, and find loopholes and deficiencies in the method. If it is found that certain features are not accurate enough or there are misjudgments when judging risky accounts and equity transfer behaviors, these features will be optimized or the weights will be adjusted. For example, if a feature is found to be prone to accidental injuries under certain circumstances, the feature can be deleted; if new illegal activity features are found, they will be added to the method for detection in a timely manner.

[0117] In addition, the adjusted method can be continuously monitored and evaluated. Changes in the recovery / rejection levels on subsequent dates can be observed to verify whether the adjusted method is effective. In addition, new user behavior data and black market cases can be continuously collected to continuously optimize the method and improve the accuracy and reliability of member rights management.

[0118] In an exemplary embodiment, a member rights protection device is provided, which can be applied to an electronic device. The device is used to implement the above member rights protection method. For example, referring to Figure 2 As shown, the device may include:

[0119] The data collection module 10 is used to collect the original behavior information of the first user account corresponding to the target member rights;

[0120] The risk control module 20 is used to concatenate the original behavior information in chronological order to obtain the concatenated target behavior information; it is also used to determine that the first user account is a risk account if at least one risk feature is identified from the target behavior information; it is also used to monitor the member rights transfer behavior of the first user account if it is determined that the first user account is a risk account.

[0121] In an exemplary embodiment, a member rights protection device is provided, which can be applied to an electronic device. In the device, the risk characteristics include at least one of the following characteristics:

[0122] Features of remote login, abnormal aggregation of login devices, abnormal interval length, remote operation, and abnormal aggregation of ordered products;

[0123] Among them, the off-site login feature characterizes that the first user account logged in off-site, the abnormal login device aggregation feature characterizes that the login devices of the first user account all have jailbreak characteristics, the abnormal interval time feature characterizes that the interval time from login to order placement of the first user account is less than or equal to the set time, the off-site operation feature characterizes that the login address and order address of the first user account are consistent and are both off-site addresses, and the single product aggregation abnormality feature characterizes the existence of multiple abnormal ordering behaviors within the set time range.

[0124] In an exemplary embodiment, a member rights protection device is provided, which can be applied to an electronic device. Figure 2 As shown, in the device,

[0125] The data collection module 10 is used to monitor the member rights transfer behavior of the first user account, and if the member rights transfer behavior of the first user account is monitored, collect the member rights transfer information of the first user account;

[0126] The risk control module 20 can be used to determine whether the membership rights transfer behavior of the first user account is operated by the user himself based on the membership rights transfer information and the target behavior information; and is also used to reject the unfinished membership rights transfer behavior and return the completed membership rights transfer content if it is determined that the membership rights transfer behavior of the first user account is not operated by the user himself.

[0127] In an exemplary embodiment, a member rights protection device is provided, which can be applied to an electronic device. In the device, member rights transfer information includes at least one of the following:

[0128] The time of membership rights transfer, the user ID of the second user account that receives the transferred membership rights, the time of receipt of the transferred membership rights by the second user account, the collection location of the second user account that receives the transferred membership rights, the user portrait of the second user account that receives the transferred membership rights, and the transfer order information.

[0129] In an exemplary embodiment, a member rights protection device is provided, which can be applied to an electronic device. Figure 2 As shown, in the device, the risk control module 20 can be used to perform at least one of the following:

[0130] Determine the time aggregation for the transfer of member rights;

[0131] Determine that there are off-site operations and clusters at the location where the member's rights are transferred;

[0132] Determining that the login device of the first user account has jailbreak characteristics and is clustered;

[0133] Determining that the second user account that receives the transferred membership benefits has no intersection with the operation location of the first user account;

[0134] Make sure that the second user accounts that receive the transferred membership benefits are dispersed and not concentrated.

[0135] In an exemplary embodiment, a member rights protection device is provided, which can be applied to an electronic device. Figure 2 As shown, in the device, the risk control module 20 can be used to:

[0136] If it is determined that the membership rights transfer behavior of the first user account is not operated by the user himself, the owner of the first user account is notified that there is an abnormality in the membership rights transfer behavior.

[0137] In an exemplary embodiment, a member rights protection device is provided, which can be applied to an electronic device. In the device, the original behavior information includes at least one of the following information:

[0138] The login time of the first user account, the login location of the first user account, the login device identifier of the first user account, the user portrait of the first user account, the member's ordered product information, the member's order time, and the member's order city.

[0139] In an exemplary embodiment, an electronic device is provided, which may include a computer or other devices, which are not limited.

[0140] Among them, reference Figure 3 As shown, the electronic device 100 includes: at least one processor 101, a memory 102, at least one network interface 104 and a user interface 103. The various components in the electronic device 100 are coupled together through a bus system 105. It can be understood that the bus system 105 is used to realize the connection and communication between these components. In addition to the data bus, the bus system 105 also includes a power bus, a control bus and a status signal bus. However, for the sake of clarity of the description, various buses are marked as bus systems 105 in the figure.

[0141] The user interface 103 may include a display, a keyboard, or a pointing electronic device (eg, a mouse, a trackball), a touch pad, or a touch screen.

[0142] It can be understood that the memory 102 in the embodiment of the present application can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct RAM bus random access memory (DRRAM). The memory 102 described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0143] In some implementations, the memory 102 stores the following elements, executable units or data structures, or a subset thereof, or an extended set thereof: an operating system 1021 and application programs 1022 .

[0144] Among them, the operating system 1021 includes various system programs, such as a framework layer, a core library layer, a driver layer, etc., which are used to implement various basic services and process hardware-based tasks. The application 1022 includes various application programs, such as a media player (Media Player), a browser (Browser), etc., which are used to implement various application services. The program that implements the method of the embodiment of the present application can be included in the application 1022.

[0145] In the embodiment of the present application, by calling the program or instructions stored in the memory 102, specifically, the program or instructions stored in the application 1022, the processor 101 is used to execute the method steps provided by each method embodiment.

[0146] The method disclosed in the above embodiment of the present application can be applied to the processor 101, or implemented by the processor 101. The processor 101 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit in the processor 101 or the instruction in the form of software. The above processor 101 can be a general processor, a digital signal processor (Digital Signal Processor, DSP), an application specific integrated circuit (Application Specific Integrated Circuit, ASIC), a field programmable gate array (Field Programmable Gate Array, FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiment of the present application can be directly embodied as a hardware decoding processor to execute, or the hardware and software units in the decoding processor can be executed. The software unit can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 102, and the processor 101 reads the information in the memory 102 and completes the steps of the above method in combination with its hardware.

[0147] It is understood that the embodiments described herein may be implemented in hardware, software, firmware, middleware, microcode, or a combination thereof. For hardware implementation, the processing unit may be implemented in one or more application specific integrated circuits (ASIC), digital signal processors (DSP), digital signal processing electronic devices (DSPD), programmable logic electronic devices (PLD), field programmable gate arrays (FPGA), general purpose processors, controllers, microcontrollers, microprocessors, other electronic units for performing the functions of the present application, or a combination thereof.

[0148] For software implementation, the technology of this article can be implemented by a unit that performs the functions of this article. The software code can be stored in a memory and executed by a processor. The memory can be implemented in the processor or outside the processor.

[0149] The terminal provided in this embodiment can execute all the steps of the above-mentioned data processing method, thereby achieving the technical effect of the above-mentioned data processing method. Please refer to the relevant description of the above-mentioned data processing method for details. For the sake of concise description, it will not be repeated here.

[0150] The embodiment of the present application also provides a storage medium (computer-readable storage medium). The storage medium here stores one or more programs. The storage medium may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a read-only memory, a flash memory, a hard disk or a solid-state drive; the memory may also include a combination of the above-mentioned types of memory.

[0151] When one or more programs in the storage medium can be executed by one or more processors, the above method executed on the electronic device side is implemented.

[0152] The processor is used to execute the program stored in the memory to implement the following steps of the method performed on the electronic device side.

[0153] The professionals should also be further aware that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented with electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0154] The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be implemented using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0155] It should be noted that the phrases "one implementation", "an embodiment", "an exemplary embodiment", "some embodiments", etc. mentioned in the specification indicate that the described embodiments may include certain features, structures or characteristics, but not every embodiment may include the certain features, structures or characteristics. In addition, such phrases do not necessarily refer to the same embodiment. In addition, when describing certain features, structures or characteristics in conjunction with an embodiment, it is within the knowledge of those skilled in the art to implement such features, structures or characteristics in conjunction with other embodiments, whether explicitly or not explicitly described.

[0156] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or electronic device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or electronic device. In the absence of more limitations, the elements defined by the sentence "comprise one..." do not exclude the presence of other identical elements in the process, method, article or electronic device including the elements.

[0157] The above embodiments are only preferred embodiments for fully illustrating the present application, and the protection scope of the present application is not limited thereto. Any equivalent substitution or change made by a person skilled in the art based on the present application is within the protection scope of the present application.

Claims

1. A member rights protection method, characterized in that: The member rights protection methods include: Collecting original behavior information of the first user account corresponding to the target member rights; Concatenating the original behavior information in chronological order to obtain concatenated target behavior information; If at least one risk feature is identified from the target behavior information, determining the first user account as a risk account; If it is determined that the first user account is a risky account, the member rights transfer behavior of the first user account is monitored.

2. The member rights protection method according to claim 1, characterized in that: The risk characteristics include at least one of the following characteristics: Features of remote login, abnormal aggregation of login devices, abnormal interval length, remote operation, and abnormal aggregation of ordered products; Among them, the off-site login feature characterizes that the first user account logged in off-site, the abnormal login device aggregation feature characterizes that the login devices of the first user account all have jailbreak characteristics, the abnormal interval time feature characterizes that the interval time from login to order placement of the first user account is less than or equal to the set time, the off-site operation feature characterizes that the login address and order address of the first user account are consistent and are both off-site addresses, and the single product aggregation abnormality feature characterizes the existence of multiple abnormal ordering behaviors within the set time range.

3. The member rights protection method according to claim 1 is characterized in that: After monitoring the member rights transfer behavior of the first user account, the member rights protection method includes: If the member rights transfer behavior of the first user account is monitored, the member rights transfer information of the first user account is collected; Based on the member benefit transfer information and the target behavior information, determining whether the member benefit transfer behavior of the first user account is operated by the user himself; If it is determined that the membership rights transfer behavior of the first user account is not operated by the user himself, the unfinished membership rights transfer behavior will be rejected and the completed membership rights transfer content will be returned.

4. The member rights protection method according to claim 3 is characterized in that: The member benefits transfer information includes at least one of the following: The time of membership rights transfer, the user ID of the second user account that receives the transferred membership rights, the time of receipt of the transferred membership rights by the second user account, the collection location of the second user account that receives the transferred membership rights, the user portrait of the second user account that receives the transferred membership rights, and the transfer order information.

5. The member rights protection method according to claim 3 is characterized in that: The determination that the membership rights transfer behavior of the first user account is not operated by the user himself includes at least one of the following: Determine the time aggregation for the transfer of member benefits; Determine that there are off-site operations and clusters at the location where the member's rights are transferred; Determining that the login device of the first user account has jailbreak characteristics and is clustered; Determining that the second user account that receives the transferred membership benefits has no intersection with the operation location of the first user account; Make sure that the second user accounts that receive the transferred membership benefits are dispersed and not concentrated.

6. The member rights protection method according to claim 3 is characterized in that: The member rights protection methods include: If it is determined that the membership rights transfer behavior of the first user account is not operated by the user himself, the owner of the first user account is notified that there is an abnormality in the membership rights transfer behavior.

7. The member rights protection method according to any one of claims 1 to 6, characterized in that: The original behavior information includes at least one of the following information: The login time of the first user account, the login location of the first user account, the login device identifier of the first user account, the user portrait of the first user account, the member's ordered product information, the member's order time, and the member's order city.

8. A member rights protection device, characterized in that: The member rights protection device includes: A data collection module, used to collect original behavior information of the first user account corresponding to the target member rights; The risk control module is used to concatenate the original behavior information in chronological order to obtain the concatenated target behavior information; it is also used to determine that the first user account is a risk account if at least one risk feature is identified from the target behavior information; it is also used to monitor the member rights transfer behavior of the first user account if it is determined that the first user account is a risk account.

9. An electronic device, characterized in that: The electronic device comprises: processor; a memory for storing instructions executable by the processor; The processor is configured to execute the member rights protection method as described in any one of claims 1-7.

10. A non-transitory computer-readable storage medium, characterized in that: When the instructions in the storage medium are executed by a processor of an electronic device, the electronic device is enabled to execute the member rights protection method as described in any one of claims 1-7.

Images