Financial security control method and device based on Internet of Things

Abstract

The invention belongs to the technical field of data security, and particularly relates to a financial security control method and device based on the Internet of Things, and the method comprises the steps: obtaining financial object multi-source information carriers which are to be subjected to security access control and have executed security access control; preprocessing the financial object multi-source information carrier to be subjected to security access control to obtain a request set to be subjected to security access control; acquiring an executed security access control request set corresponding to a security access control strategy in the financial object multi-source information carrier which has executed security access control, and calculating the matching degree between the executed security access control request set and the to-be-security access control request set; and initiating access to the financial object multi-source information carrier to be subjected to security access control based on the matching degree. According to the invention, accurate security access control can be effectively carried out on the financial object carrying multi-source information carriers with various formats, and a feedback result relatively meeting the security access control requirement is given for the security access control request.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to a financial security control method and device based on the Internet of Things. Background Art

[0002] At present, multimedia data platforms are becoming more and more common in people's daily lives. Paid listening or watching of videos, audios, and texts has become a daily choice for more and more users. These activities usually interact with IoT devices in the home, such as smart speakers, smart TVs, smart refrigerators, and other devices with display screens or external speakers.

[0003] However, there are many financial security risks in these multimedia payment activities and their association with the Internet of Things, such as user account security risks, multimedia platform financial access security risks, and Internet of Things device financial security risks. How to perform secure access control on multimedia data platforms with multi-source data types based on the Internet of Things, thereby protecting the financial security of users, multi-source data platforms, and Internet of Things devices, while ensuring the smoothness and experience of access, is a technical problem that needs to be solved urgently. Summary of the invention

[0004] To achieve the above objectives, this application provides the following technical solutions:

[0005] According to a first aspect of the present invention, the present invention claims protection for a financial security control method based on the Internet of Things, comprising:

[0006] Acquire multi-source information carriers of financial objects to be subject to security access control and those that have undergone security access control;

[0007] Preprocessing the multi-source information carriers of the financial objects to be subject to security access control to obtain a request set to be subject to security access control;

[0008] Obtaining the executed security access control request set corresponding to the security access control policy in the multi-source information carrier of the financial object for which security access control has been executed, and calculating the matching degree between the executed security access control request set and the pending security access control request set;

[0009] Based on the matching degree, access is initiated to the multi-source information carrier of the financial object to be securely access controlled.

[0010] Furthermore, the step of obtaining the multi-source information carriers of financial objects to be subject to security access control and those that have undergone security access control also includes:

[0011] Acquire the real-time access address of the user, and use the multi-source information carrier of the financial object corresponding to the real-time access address of the user as the multi-source information carrier of the financial object to be subject to security access control;

[0012] Acquire the historical access address of the user, and use the multi-source information carrier of the financial object corresponding to the historical access address of the user as the multi-source information carrier of the financial object for which the security access control has been executed;

[0013] When obtaining the real-time access address of the user, recording the user type and access time of the user;

[0014] The historical access addresses of the user include the user type and access time of the user.

[0015] Further, preprocessing the multi-source information carriers of the financial objects to be subject to security access control to obtain a request set to be subject to security access control also includes:

[0016] Acquiring source data attribute information of the multi-source information carrier of the financial object to be securely access controlled;

[0017] The user type, access time and attribute information of the source data corresponding to each financial object multi-source information carrier are used to form a triplet as a security access control request;

[0018] The obtained multiple access control requests to be secured are taken as an access control request set to be secured.

[0019] Furthermore, the step of obtaining the executed security access control request set corresponding to the security access control policy in the multi-source information carrier of the financial object on which security access control has been executed, and calculating the matching degree between the executed security access control request set and the pending security access control request set, further includes:

[0020] Obtain the security access control policy and the corresponding executed security access control request set from the security scope control policy data table;

[0021] The pending security access control requests of the pending security access control request set are compared in sequence with the executed security access control requests of the executed security access control request set to obtain the executed associated security access control requests of each pending security access control request.

[0022] Furthermore, the obtaining of the security access control request set corresponding to the security access control policy in the multi-source information carrier of the financial object to be securely access controlled from the security access control request set based on the matching degree also includes:

[0023] Obtain the security access control policy corresponding to the executed associated security access control request in the security scope control policy data table;

[0024] Extracting the access control time and access control means of the security access control policy;

[0025] Access is initiated to the multi-source information carrier of the financial object to be securely access controlled according to the access control time and access control means.

[0026] According to a second aspect of the present invention, the present invention claims protection for a financial security control device based on the Internet of Things, comprising:

[0027] Request collection module to obtain multi-source information carriers of financial objects to be subject to security access control and those that have undergone security access control;

[0028] A request preprocessing module preprocesses the multi-source information carriers of the financial objects to be subject to security access control to obtain a request set to be subject to security access control;

[0029] A matching degree calculation module is used to obtain the executed security access control request set corresponding to the security access control policy in the multi-source information carrier of the financial object on which the security access control has been executed, and calculate the matching degree between the executed security access control request set and the pending security access control request set;

[0030] The access control module initiates access to the multi-source information carrier of the financial object to be subject to security access control based on the matching degree.

[0031] Furthermore, the request collection module further includes:

[0032] Acquire the real-time access address of the user, and use the multi-source information carrier of the financial object corresponding to the real-time access address of the user as the multi-source information carrier of the financial object to be subject to security access control;

[0033] Acquire the historical access address of the user, and use the multi-source information carrier of the financial object corresponding to the historical access address of the user as the multi-source information carrier of the financial object for which the security access control has been executed;

[0034] When obtaining the real-time access address of the user, recording the user type and access time of the user;

[0035] The historical access addresses of the user include the user type and access time of the user.

[0036] Furthermore, the request preprocessing module further includes:

[0037] Acquiring source data attribute information of the multi-source information carrier of the financial object to be securely access controlled;

[0038] The user type, access time and attribute information of the source data corresponding to each financial object multi-source information carrier are used to form a triplet as a security access control request;

[0039] The obtained multiple access control requests to be secured are taken as an access control request set to be secured.

[0040] Furthermore, the matching degree calculation module further includes:

[0041] Obtain the security access control policy and the corresponding executed security access control request set from the security scope control policy data table;

[0042] The pending security access control requests of the pending security access control request set are compared in sequence with the executed security access control requests of the executed security access control request set to obtain the executed associated security access control requests of each pending security access control request.

[0043] Furthermore, the access control module further includes:

[0044] Obtain the security access control policy corresponding to the executed associated security access control request in the security scope control policy data table;

[0045] Extracting the access control time and access control means of the security access control policy;

[0046] Access is initiated to the multi-source information carrier of the financial object to be securely access controlled according to the access control time and access control means.

[0047] The present invention belongs to the field of data security technology, and in particular, relates to a financial security control method and device based on the Internet of Things, which obtains multi-source information carriers of financial objects to be subject to security access control and those that have been subject to security access control; pre-processes the multi-source information carriers of financial objects subject to security access control to obtain a set of requests for security access control to be subject to security access control; obtains a set of executed security access control requests corresponding to the security access control policy in the multi-source information carriers of financial objects subject to security access control, calculates the matching degree between the executed security access control request set and the set of requests for security access control to be subject to security access control; and initiates access to the multi-source information carriers of financial objects subject to security access control based on the matching degree. The present invention can effectively perform accurate security access control on financial objects equipped with multi-source information carriers in various formats, and provide feedback results that are relatively in line with security access control requirements for security access control requests. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] Figure 1 A workflow diagram of a financial security control method based on the Internet of Things for which protection is requested in an embodiment of the present application;

[0049] Figure 2 A workflow diagram of a financial security control method based on the Internet of Things for which protection is requested in an embodiment of the present application;

[0050] Figure 3 A workflow diagram of a financial security control method based on the Internet of Things for which protection is requested in an embodiment of the present application;

[0051] Figure 4 This is a structural module diagram of a financial security control device based on the Internet of Things for which protection is requested in an embodiment of the present application. DETAILED DESCRIPTION

[0052] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0053] The terms "first", "second" and "third" in this application are only used for descriptive purposes and cannot be understood as indicating or implying relative importance or implicitly indicating the number of indicated technical features. Therefore, the features defined as "first", "second" and "third" can explicitly or implicitly include at least one of the features. In the description of this application, the meaning of "multiple" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined. All directional indications (such as up, down, left, right, front, back...) in the embodiments of this application are only used to explain the relative position relationship, movement, etc. between the components under a certain specific posture (as shown in the accompanying drawings). If the specific posture changes, the directional indication also changes accordingly. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but optionally also includes steps or units that are not listed, or optionally also includes other steps or units inherent to these processes, methods, products or devices.

[0054] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0055] According to the first embodiment of the present invention, the present invention claims a financial security control method based on the Internet of Things, referring to Figure 1 ,include:

[0056] Acquire multi-source information carriers of financial objects to be subject to security access control and those that have undergone security access control;

[0057] Preprocessing the multi-source information carriers of the financial objects to be subject to security access control to obtain a request set to be subject to security access control;

[0058] Obtaining the executed security access control request set corresponding to the security access control policy in the multi-source information carrier of the financial object for which security access control has been executed, and calculating the matching degree between the executed security access control request set and the pending security access control request set;

[0059] Based on the matching degree, access is initiated to the multi-source information carrier of the financial object to be securely access controlled.

[0060] This embodiment is aimed at paid listening or viewing activities of video, audio, text and other data sources, combined with the access control issues generated during the interaction of IoT devices in the home (such as smart speakers, smart TVs, smart refrigerators and other devices with display screens or external speakers);

[0061] For example, for paid music listening platforms, access control behaviors such as payment in smart speakers need to be protected and controlled for financial security;

[0062] The following is an explanation of smart speakers as IoT devices and music payment platforms as multi-source information carriers of financial objects.

[0063] Furthermore, the step of obtaining the multi-source information carriers of financial objects to be subject to security access control and those that have undergone security access control also includes:

[0064] Acquire the real-time access address of the user, and use the multi-source information carrier of the financial object corresponding to the real-time access address of the user as the multi-source information carrier of the financial object to be subject to security access control;

[0065] Acquire the historical access address of the user, and use the multi-source information carrier of the financial object corresponding to the historical access address of the user as the multi-source information carrier of the financial object for which the security access control has been executed;

[0066] When obtaining the real-time access address of the user, recording the user type and access time of the user;

[0067] The historical access addresses of the user include the user type and access time of the user.

[0068] In this embodiment, the user's real-time access address is the network address of the smart speaker IoT smart device accessed by the user, and the corresponding financial object multi-source information carrier is the music payment platform linked to the smart speaker IoT smart device;

[0069] The user's historical access address is the network address of the IoT smart device that the user has visited in the past, and the corresponding financial object multi-source information carrier is the payment platform to which the IoT smart device is linked;

[0070] User types include at least: member user and guest user;

[0071] The member users include at least: adult users and minor users;

[0072] The access time is a specific access time point, and the access time is clustered into an idle time period and a busy time period according to the specific access time point.

[0073] Further, refer to Figure 2 , preprocessing the multi-source information carriers of the financial objects to be subject to security access control, obtaining a request set to be subject to security access control, and also including:

[0074] Acquiring source data attribute information of the multi-source information carrier of the financial object to be securely access controlled;

[0075] The user type, access time and attribute information of the source data corresponding to each financial object multi-source information carrier are used to form a triplet as a security access control request;

[0076] The obtained multiple access control requests to be secured are taken as an access control request set to be secured.

[0077] Among them, in this embodiment, when the multi-source information carrier of the financial object to be securely accessed and controlled is a music payment platform linked to the smart speaker IoT smart device, the corresponding source data attribute information at least includes payment channel characteristics and paid audio source characteristics of the music payment platform;

[0078] The paid audio source characteristics include at least one or more of the paid audio platform-associated IoT device, paid audio duration, and paid audio listing time;

[0079] The user type, access time and source data attribute information of the user corresponding to each financial object multi-source information carrier are formed into a triplet as a pending security access control request. For example, a pending security access control request is <adult user, busy time period, UnionPay bank card and paid audio listing time>.

[0080] Furthermore, the step of obtaining the executed security access control request set corresponding to the security access control policy in the multi-source information carrier of the financial object on which security access control has been executed, and calculating the matching degree between the executed security access control request set and the pending security access control request set, further includes:

[0081] Obtain the security access control policy and the corresponding executed security access control request set from the security scope control policy data table;

[0082] The pending security access control requests of the pending security access control request set are compared in sequence with the executed security access control requests of the executed security access control request set to obtain the executed associated security access control requests of each pending security access control request.

[0083] Wherein, in this embodiment, a relational database is used, and a security access control policy data table is established in the database;

[0084] The security access control policy data table stores the executed security access control request set and the mapped associated security access control policy;

[0085] The security access control strategy at least includes access control time and access control means;

[0086] The access control time is the time period during which access is allowed;

[0087] The access control means at least include: password access payment, signature access payment, voice access payment, and face access payment;

[0088] When the similarity comparison is performed, semantic similarity matching is adopted, and weighted calculation is performed based on the similarity matching weights of user type, access time and attribute information of the source data, which are 0.25, 0.25, and 0.5 respectively.

[0089] Further, refer to Figure 3 , the step of obtaining a security access control request set corresponding to the security access control policy in the multi-source information carrier of the financial object to be securely access controlled from the security access control request set based on the matching degree, further includes:

[0090] Obtain the security access control policy corresponding to the executed associated security access control request in the security scope control policy data table;

[0091] Extracting the access control time and access control means of the security access control policy;

[0092] Access is initiated to the multi-source information carrier of the financial object to be securely access controlled according to the access control time and access control means.

[0093] In this embodiment, the executed associated security access control request of each pending security access control request is obtained according to the calculation result of the weighted calculation.

[0094] Obtain the security access control policy corresponding to the executed associated security access control request in the security scope control policy data table;

[0095] An access payment operation is initiated on the multi-source information carrier of the financial object to be securely access controlled according to the access control time and access control means of the executed associated security access control request.

[0096] According to a second embodiment of the present invention, the present invention claims protection for a financial security control device based on the Internet of Things, referring to FIG. 4 , comprising:

[0097] Request collection module to obtain multi-source information carriers of financial objects to be subject to security access control and those that have undergone security access control;

[0098] A request preprocessing module preprocesses the multi-source information carriers of the financial objects to be subject to security access control to obtain a request set to be subject to security access control;

[0099] A matching degree calculation module is used to obtain the executed security access control request set corresponding to the security access control policy in the multi-source information carrier of the financial object on which the security access control has been executed, and calculate the matching degree between the executed security access control request set and the pending security access control request set;

[0100] The access control module initiates access to the multi-source information carrier of the financial object to be subject to security access control based on the matching degree.

[0101] Furthermore, the request collection module further includes:

[0102] Acquire the real-time access address of the user, and use the multi-source information carrier of the financial object corresponding to the real-time access address of the user as the multi-source information carrier of the financial object to be subject to security access control;

[0103] Acquire the historical access address of the user, and use the multi-source information carrier of the financial object corresponding to the historical access address of the user as the multi-source information carrier of the financial object for which the security access control has been executed;

[0104] When obtaining the real-time access address of the user, recording the user type and access time of the user;

[0105] The historical access addresses of the user include the user type and access time of the user.

[0106] Furthermore, the request preprocessing module further includes:

[0107] Acquiring source data attribute information of the multi-source information carrier of the financial object to be securely access controlled;

[0108] The user type, access time and attribute information of the source data corresponding to each financial object multi-source information carrier are used to form a triplet as a security access control request;

[0109] The obtained multiple access control requests to be secured are taken as an access control request set to be secured.

[0110] Furthermore, the matching degree calculation module further includes:

[0111] Obtain the security access control policy and the corresponding executed security access control request set from the security scope control policy data table;

[0112] The pending security access control requests of the pending security access control request set are compared in sequence with the executed security access control requests of the executed security access control request set to obtain the executed associated security access control requests of each pending security access control request.

[0113] Furthermore, the access control module further includes:

[0114] Obtain the security access control policy corresponding to the executed associated security access control request in the security scope control policy data table;

[0115] Extracting the access control time and access control means of the security access control policy;

[0116] Access is initiated to the multi-source information carrier of the financial object to be securely access controlled according to the access control time and access control means.

[0117] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0118] In addition, each functional unit in each embodiment of the present application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of software functional units. The above is only an implementation method of the present application, and does not limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the specification and drawings of this application, or directly or indirectly used in other related technical fields, is also included in the patent protection scope of the present application.

[0119] The specific implementation methods of the invention are described in detail above, but they are only examples, and the present application is not limited to the specific implementation methods described above. For those skilled in the art, any equivalent modification or substitution of the invention is also within the scope of the present application, and therefore, the equalization, modification, and improvement made without departing from the spirit and principle of the present application should be included in the scope of the present application.

Claims

1. A financial security control method based on the Internet of Things, characterized in that: include: Acquire multi-source information carriers of financial objects to be subject to security access control and those that have undergone security access control; Preprocessing the multi-source information carriers of the financial objects to be subject to security access control to obtain a request set to be subject to security access control; Obtaining the executed security access control request set corresponding to the security access control policy in the multi-source information carrier of the financial object for which security access control has been executed, and calculating the matching degree between the executed security access control request set and the pending security access control request set; Based on the matching degree, access is initiated to the multi-source information carrier of the financial object to be securely access controlled.

2. According to claim 1, a financial security control method based on the Internet of Things is characterized in that: The step of obtaining the multi-source information carriers of financial objects to be subject to security access control and those subject to security access control also includes: Acquire the real-time access address of the user, and use the multi-source information carrier of the financial object corresponding to the real-time access address of the user as the multi-source information carrier of the financial object to be subject to security access control; Acquire the historical access address of the user, and use the multi-source information carrier of the financial object corresponding to the historical access address of the user as the multi-source information carrier of the financial object for which the security access control has been executed; When obtaining the real-time access address of the user, recording the user type and access time of the user; The historical access addresses of the user include the user type and access time of the user.

3. A financial security control method based on the Internet of Things according to claim 2, characterized in that: Preprocessing the multi-source information carriers of the financial objects to be subject to security access control to obtain a request set to be subject to security access control, further comprising: Acquiring source data attribute information of the multi-source information carrier of the financial object to be securely access controlled; The user type, access time and attribute information of the source data corresponding to each financial object multi-source information carrier are used to form a triplet as a security access control request; The obtained multiple access control requests to be secured are taken as an access control request set to be secured.

4. The method for financial security control based on the Internet of Things according to claim 3 is characterized in that: The step of obtaining the executed security access control request set corresponding to the security access control policy in the multi-source information carrier of the financial object on which the security access control has been executed, and calculating the matching degree between the executed security access control request set and the pending security access control request set, further includes: Obtain the security access control policy and the corresponding executed security access control request set from the security scope control policy data table; The pending security access control requests of the pending security access control request set are compared in sequence with the executed security access control requests of the executed security access control request set to obtain the executed associated security access control requests of each pending security access control request.

5. A financial security control method based on the Internet of Things according to claim 4, characterized in that: The step of obtaining a security access control request set corresponding to the security access control policy in the multi-source information carrier of the financial object to be securely access controlled from the security access control request set based on the matching degree also includes: Obtain the security access control policy corresponding to the executed associated security access control request in the security scope control policy data table; Extracting the access control time and access control means of the security access control policy; Access is initiated to the multi-source information carrier of the financial object to be securely access controlled according to the access control time and access control means.

6. A financial security control device based on the Internet of Things, characterized in that: include: Request collection module to obtain multi-source information carriers of financial objects to be subject to security access control and those that have undergone security access control; A request preprocessing module preprocesses the multi-source information carriers of the financial objects to be subject to security access control to obtain a request set to be subject to security access control; A matching degree calculation module is used to obtain the executed security access control request set corresponding to the security access control policy in the multi-source information carrier of the financial object on which the security access control has been executed, and calculate the matching degree between the executed security access control request set and the pending security access control request set; The access control module initiates access to the multi-source information carrier of the financial object to be subject to security access control based on the matching degree.

7. A financial security control device based on the Internet of Things according to claim 6, characterized in that: The request collection module further includes: Acquire the real-time access address of the user, and use the multi-source information carrier of the financial object corresponding to the real-time access address of the user as the multi-source information carrier of the financial object to be subject to security access control; Acquire the historical access address of the user, and use the multi-source information carrier of the financial object corresponding to the historical access address of the user as the multi-source information carrier of the financial object for which the security access control has been executed; When obtaining the real-time access address of the user, recording the user type and access time of the user; The historical access addresses of the user include the user type and access time of the user.

8. The financial security control device based on the Internet of Things according to claim 7, characterized in that: The request preprocessing module further includes: Acquiring source data attribute information of the multi-source information carrier of the financial object to be securely access controlled; The user type, access time and attribute information of the source data corresponding to each financial object multi-source information carrier are used to form a triplet as a security access control request; The obtained multiple access control requests to be secured are taken as an access control request set to be secured.

9. A financial security control device based on the Internet of Things according to claim 8, characterized in that: The matching degree calculation module further includes: Obtain the security access control policy and the corresponding executed security access control request set from the security scope control policy data table; The pending security access control requests of the pending security access control request set are compared in sequence with the executed security access control requests of the executed security access control request set to obtain the executed associated security access control requests of each pending security access control request.

10. A financial security control device based on the Internet of Things according to claim 9, characterized in that: The access control module further includes: Obtain the security access control policy corresponding to the executed associated security access control request in the security scope control policy data table; Extracting the access control time and access control means of the security access control policy; Access is initiated to the multi-source information carrier of the financial object to be securely access controlled according to the access control time and access control means.

Images