Early warning method and device for financial risk security

Abstract

The invention relates to the technical field of safety control, in particular to a financial risk safety-oriented early warning method and device, and the method comprises the steps: obtaining a transaction plan for financial business sent by a manager; matching a candidate transaction point set of which the transaction completion time is before the planned execution time from a transaction point set library of the navigation area; detecting a plurality of candidate transaction point set groups from the candidate transaction point sets; obtaining a plurality of transaction menus respectively associated with the plurality of candidate transaction point set groups based on the candidate transaction amount and the number of candidate transaction points associated with each candidate transaction point set of the plurality of candidate transaction point set groups; a plurality of transaction menus are provided to a manager. According to the invention, accurate planning of financial risk security is carried out especially for a plurality of transaction point gathering points in a financial business process, risks caused by high concurrency are avoided, and transaction quality can be guaranteed to the greatest extent.

Description

Technical Field

[0001] The present application relates to the field of security control technology, and in particular to an early warning method and device for financial risk security. Background Art

[0002] In the field of traditional financial product risk management, risk assessment and early warning mainly rely on historical data analysis, market monitoring and expert experience. These methods usually include quantitative analysis of market volatility, credit ratings, liquidity indicators and operational risks. Some existing methods can help financial product management companies identify and prevent potential risks to a certain extent, but they often rely on the accuracy of historical data and the stability of market conditions, and have limited ability to monitor in real time and predict systemic risks.

[0003] Security issues are particularly important when banks, loan companies and other financial institutions conduct financial transactions. When conducting large-scale, multi-threaded financial transactions, the probability of being attacked and breached due to negligence is greatly increased. Therefore, in order to better allocate resources reasonably for security scheduling, the problem of security access control resource scheduling for multiple financial businesses needs to be solved urgently. Summary of the invention

[0004] To achieve the above objectives, this application provides the following technical solutions:

[0005] According to a first aspect of the present invention, the present invention claims protection for an early warning method for financial risk security, comprising:

[0006] Acquire a transaction plan for financial business sent by a manager, and extract transaction plan attribute characteristics of the transaction plan;

[0007] Matching a candidate transaction point set whose transaction completion time is before the transaction plan execution time from the transaction point set library in the navigation area;

[0008] Clustering is performed from the candidate transaction point set to obtain multiple candidate transaction point set groups;

[0009] Based on the candidate transaction amounts and the number of candidate transaction points associated with each of the candidate transaction point sets of the plurality of candidate transaction point set groups, a plurality of transaction menus respectively associated with the plurality of candidate transaction point set groups are obtained;

[0010] Provides managers with a menu to display multiple transactions.

[0011] Furthermore, the step of obtaining the transaction plan for the financial business sent by the manager and extracting the transaction plan attribute characteristics of the transaction plan further includes:

[0012] The manager obtains a plurality of pending financial businesses from the financial businesses and sorts the plurality of pending financial businesses according to their risk levels;

[0013] Obtaining pending financial transactions with the highest risk level, and collecting transaction plans in the pending financial transactions;

[0014] The corresponding trading plan attribute features are extracted from the trading plan, and the trading plan attribute features at least include the trading plan execution time of the trading plan.

[0015] Furthermore, matching a candidate transaction point set whose transaction completion time is before the transaction plan execution time from the transaction point set library of the navigation area also includes:

[0016] The manager obtains the financial business POI from the financial business to be processed, and uses the financial business POI as the navigation area;

[0017] Analyze the transaction node sets of each of the financial service POIs, and extract the transaction completion time of the transaction node sets;

[0018] The transaction completion time of the transaction node set is compared with the transaction plan execution time of the transaction plan, and the transaction node set corresponding to the transaction completion time before the transaction plan execution time is taken as the candidate transaction point set.

[0019] Furthermore, clustering the candidate transaction point set to obtain a plurality of candidate transaction point set groups further includes:

[0020] Acquire transaction clustering features of each transaction point in the candidate transaction point set;

[0021] The candidate transaction point set is clustered and divided according to the transaction clustering features to obtain multiple candidate transaction point set groups.

[0022] Furthermore, the method of obtaining multiple transaction menus respectively associated with the multiple candidate transaction point sets based on the candidate transaction amounts and the number of candidate transaction points associated with each candidate transaction point set of the multiple candidate transaction point set groups also includes:

[0023] Acquire clustering features of the plurality of candidate transaction point set groups, and set a first transaction security policy for the transaction point set group based on the clustering features;

[0024] Collecting candidate transaction amounts and numbers of candidate transaction points associated with each candidate transaction point set of the plurality of candidate transaction point set groups to obtain a second transaction security policy for the transaction point set group;

[0025] A plurality of transaction menus respectively associated with a plurality of candidate transaction point set groups are obtained according to the first transaction security policy and the second transaction security policy.

[0026] According to a second aspect of the present invention, the present invention seeks protection for an early warning device for financial risk security, comprising:

[0027] A plan collection module, which obtains the transaction plan for financial business sent by the manager and extracts the transaction plan attribute characteristics of the transaction plan;

[0028] A navigation matching module, matching a candidate transaction point set whose transaction completion time is before the transaction plan execution time from a transaction point set library of the navigation area;

[0029] A clustering module, clustering the candidate transaction point set to obtain multiple candidate transaction point set groups;

[0030] A menu generation module, based on the candidate transaction amounts and the number of candidate transaction points associated with each of the candidate transaction point sets of the plurality of candidate transaction point set groups, obtains a plurality of transaction menus respectively associated with the plurality of candidate transaction point set groups;

[0031] The display module provides managers with multiple transaction menus.

[0032] Furthermore, the plan collection module further includes:

[0033] The manager obtains a plurality of pending financial businesses from the financial businesses and sorts the plurality of pending financial businesses according to their risk levels;

[0034] Obtaining pending financial transactions with the highest risk level, and collecting transaction plans in the pending financial transactions;

[0035] The corresponding trading plan attribute features are extracted from the trading plan, and the trading plan attribute features at least include the trading plan execution time of the trading plan.

[0036] Furthermore, the navigation matching module further includes:

[0037] The manager obtains the financial business POI from the financial business to be processed, and uses the financial business POI as the navigation area;

[0038] Analyze the transaction node sets of each of the financial service POIs, and extract the transaction completion time of the transaction node sets;

[0039] The transaction completion time of the transaction node set is compared with the transaction plan execution time of the transaction plan, and the transaction node set corresponding to the transaction completion time before the transaction plan execution time is taken as the candidate transaction point set.

[0040] Furthermore, the clustering module further includes:

[0041] Acquire transaction clustering features of each transaction point in the candidate transaction point set;

[0042] The candidate transaction point set is clustered and divided according to the transaction clustering features to obtain multiple candidate transaction point set groups.

[0043] Furthermore, the menu generation module further includes:

[0044] Acquire clustering features of the plurality of candidate transaction point set groups, and set a first transaction security policy for the transaction point set group based on the clustering features;

[0045] Collecting candidate transaction amounts and numbers of candidate transaction points associated with each candidate transaction point set of the plurality of candidate transaction point set groups to obtain a second transaction security policy for the transaction point set group;

[0046] A plurality of transaction menus respectively associated with a plurality of candidate transaction point set groups are obtained according to the first transaction security policy and the second transaction security policy.

[0047] The present application relates to the field of security control technology, and in particular to an early warning method and device for financial risk security, which obtains a transaction plan for financial business sent by a manager; matches a candidate transaction point set whose transaction completion time is before the planned execution time from a transaction point set library in a navigation area; detects multiple candidate transaction point set groups from the candidate transaction point set; obtains multiple transaction menus respectively associated with multiple candidate transaction point set groups based on the candidate transaction amounts and the number of candidate transaction points associated with each candidate transaction point set of the multiple candidate transaction point set groups; and provides multiple transaction menus to the manager. The present invention is particularly aimed at accurately planning financial risk security for multiple transaction point sets in the financial business process, avoiding risks caused by high concurrency, and can maximize transaction quality. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] Figure 1 A workflow diagram of a financial risk security early warning method for which protection is sought in an embodiment of the present application;

[0049] Figure 2 A second working flow chart of a financial risk security early warning method claimed for protection in an embodiment of the present application;

[0050] Figure 3 A third working flow diagram of a financial risk security early warning method claimed in the embodiment of the present application;

[0051] Figure 4 A fourth work flow chart of a financial risk security early warning method claimed in the embodiment of the present application;

[0052] Figure 5 This is a structural module diagram of a financial risk security early warning device for which protection is sought in an embodiment of the present application. DETAILED DESCRIPTION

[0053] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0054] The terms "first", "second" and "third" in this application are only used for descriptive purposes and cannot be understood as indicating or implying relative importance or implicitly indicating the number of indicated technical features. Therefore, the features defined as "first", "second" and "third" can explicitly or implicitly include at least one of the features. In the description of this application, the meaning of "multiple" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined. All directional indications (such as up, down, left, right, front, back...) in the embodiments of this application are only used to explain the relative position relationship, movement, etc. between the components under a certain specific posture (as shown in the accompanying drawings). If the specific posture changes, the directional indication also changes accordingly. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but optionally also includes steps or units that are not listed, or optionally also includes other steps or units inherent to these processes, methods, products or devices.

[0055] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0056] According to the first embodiment of the present invention, the present invention claims a method for early warning of financial risk security, referring to Figure 1 ,include:

[0057] Acquire a transaction plan for financial business sent by a manager, and extract transaction plan attribute characteristics of the transaction plan;

[0058] Matching a candidate transaction point set whose transaction completion time is before the transaction plan execution time from the transaction point set library in the navigation area;

[0059] Clustering is performed from the candidate transaction point set to obtain multiple candidate transaction point set groups;

[0060] Based on the candidate transaction amounts and the number of candidate transaction points associated with each of the candidate transaction point sets of the plurality of candidate transaction point set groups, a plurality of transaction menus respectively associated with the plurality of candidate transaction point set groups are obtained;

[0061] Provides managers with a menu to display multiple transactions.

[0062] Among them, the embodiments of the present invention are mainly implemented for financial institutions such as banks and loan companies. When these institutions conduct financial transactions, security issues are particularly important. When conducting large-scale, multi-threaded financial transactions, the probability of suffering security attacks and being attacked and breached due to negligence is greatly increased. Therefore, in order to better allocate resources reasonably for security scheduling, this embodiment is aimed at the problem of security access control resource scheduling for multiple financial services.

[0063] Further, the transaction plan for financial business sent by the manager is obtained, and the transaction plan attribute characteristics of the transaction plan are extracted, and reference is made to Figure 2 , also includes:

[0064] The manager obtains a plurality of pending financial businesses from the financial businesses and sorts the plurality of pending financial businesses according to their risk levels;

[0065] Obtaining pending financial transactions with the highest risk level, and collecting transaction plans in the pending financial transactions;

[0066] The corresponding trading plan attribute features are extracted from the trading plan, and the trading plan attribute features at least include the trading plan execution time of the trading plan.

[0067] Among them, in this embodiment, the managers are managers of financial institutions such as banks and loan companies;

[0068] The multiple pending financial businesses are pending businesses with fund transactions between the financial institution and various cooperative units, such as loans, deposits, payments, etc.;

[0069] The risk level of the pending financial business is positively correlated with the importance of the cooperation unit and the amount of the pending financial business;

[0070] Obtain the pending financial business with the highest risk level, and collect the specific transaction plan of the pending financial business with the highest risk level;

[0071] The trading plan has specific attribute characteristics, such as the trading plan introduction, trading plan execution time, trading plan object, trading plan amount, etc.

[0072] Further, refer to Figure 3 , matching a candidate transaction point set with a transaction completion time before the transaction plan execution time from the transaction point set library of the navigation area, further comprising:

[0073] The manager obtains the financial business POI from the financial business to be processed, and uses the financial business POI as the navigation area;

[0074] Analyze the transaction node sets of each of the financial service POIs, and extract the transaction completion time of the transaction node sets;

[0075] The transaction completion time of the transaction node set is compared with the transaction plan execution time of the transaction plan, and the transaction node set corresponding to the transaction completion time before the transaction plan execution time is taken as the candidate transaction point set.

[0076] In this embodiment, the navigation area is the financial business POI area of ​​the cooperation unit. For example, if the cooperation unit is Hospital A, the POI area of ​​financial business in Hospital A that cooperates with the financial institution is set as the navigation area.

[0077] In the navigation area, there is a transaction node set consisting of multiple transaction nodes, such as an outpatient transaction node, an emergency transaction node, and an inpatient transaction node;

[0078] The relevant transaction business of each transaction node has a corresponding transaction completion time;

[0079] In order to avoid other businesses from interfering with the transaction plan of the target business and increasing the risk of subsequent financial transactions, the transaction completion time of the transaction node set and the transaction plan execution time of the transaction plan are compared, and the transaction node set corresponding to the transaction completion time before the transaction plan execution time is used as the candidate transaction point set, so as to avoid the risk of a large number of concurrent businesses and the most important business;

[0080] For example, a bank has financial business dealings with multiple entities, among which the one with B Real Estate Company has the highest priority, and obtains the financial business with B as a transaction plan;

[0081] The transaction is scheduled to be completed on August 30, 2024;

[0082] The bank also has ongoing financial business dealings with Hospital A, with the first outpatient transaction node, the first emergency transaction node, and the first inpatient transaction node;

[0083] The transaction completion time for the first outpatient transaction node is August 10, 2024, the transaction completion time for the first emergency transaction node is September 10, 2024, and the transaction completion time for the first inpatient transaction node is August 20, 2024;

[0084] By comparing the completion time of the first outpatient transaction node and the first inpatient transaction node to be before the transaction plan execution time, the corresponding transaction node set is used as the candidate transaction point set.

[0085] Furthermore, clustering the candidate transaction point set to obtain a plurality of candidate transaction point set groups further includes:

[0086] Acquire transaction clustering features of each transaction point in the candidate transaction point set;

[0087] The candidate transaction point set is clustered and divided according to the transaction clustering features to obtain multiple candidate transaction point set groups.

[0088] Wherein, in this embodiment, the clustering features include at least the object type and size of the POI;

[0089] The bank also has ongoing financial business dealings with Hospital C, and has a second outpatient transaction node, a second emergency transaction node, and a third inpatient transaction node. Through time comparison, the second outpatient transaction node and the second emergency transaction node are obtained as a candidate transaction point set;

[0090] Clustering based on POI object types can cluster the first outpatient transaction node and the second outpatient transaction node as a candidate transaction point set group.

[0091] Further, the candidate transaction amount and the number of candidate transaction points associated with each candidate transaction point set of the plurality of candidate transaction point set groups are used to obtain a plurality of transaction menus respectively associated with the plurality of candidate transaction point set groups, and the plurality of transaction menus respectively associated with the plurality of candidate transaction point set groups are obtained by referring to Figure 4 , also includes:

[0092] Acquire clustering features of the plurality of candidate transaction point set groups, and set a first transaction security policy for the transaction point set group based on the clustering features;

[0093] Collecting candidate transaction amounts and numbers of candidate transaction points associated with each candidate transaction point set of the plurality of candidate transaction point set groups to obtain a second transaction security policy for the transaction point set group;

[0094] A plurality of transaction menus respectively associated with a plurality of candidate transaction point set groups are obtained according to the first transaction security policy and the second transaction security policy.

[0095] Among them, in this embodiment, the first transaction security policy is set based on clustering features, namely, transaction POI type and size;

[0096] The first transaction security strategy sets a specific facial recognition organ. Since most hospital personnel wear masks, the specific facial recognition can be set to eye recognition instead of the overall face recognition.

[0097] The first transaction security strategy also includes setting a specific signature strategy. Since the handwriting of most hospital staff is different from that of ordinary people, a specific signature handwriting can be set according to the specific object POI;

[0098] The second transaction security policy is set based on the candidate transaction amount and the number of candidate transaction points. In principle, the larger the amount and the more transaction points, the higher the transaction security policy;

[0099] For example, the second transaction security policy may specifically set the password length, password character type, etc.

[0100] According to the second embodiment of the present invention, the present invention claims a warning device for financial risk security, referring to Figure 5 ,include:

[0101] A plan collection module, which obtains the transaction plan for financial business sent by the manager and extracts the transaction plan attribute characteristics of the transaction plan;

[0102] A navigation matching module, matching a candidate transaction point set whose transaction completion time is before the transaction plan execution time from a transaction point set library of the navigation area;

[0103] A clustering module, clustering the candidate transaction point set to obtain multiple candidate transaction point set groups;

[0104] A menu generation module, based on the candidate transaction amounts and the number of candidate transaction points associated with each of the candidate transaction point sets of the plurality of candidate transaction point set groups, obtains a plurality of transaction menus respectively associated with the plurality of candidate transaction point set groups;

[0105] The display module provides managers with multiple transaction menus.

[0106] Furthermore, the plan collection module further includes:

[0107] The manager obtains a plurality of pending financial businesses from the financial businesses and sorts the plurality of pending financial businesses according to their risk levels;

[0108] Obtaining pending financial transactions with the highest risk level, and collecting transaction plans in the pending financial transactions;

[0109] The corresponding trading plan attribute features are extracted from the trading plan, and the trading plan attribute features at least include the trading plan execution time of the trading plan.

[0110] Furthermore, the navigation matching module further includes:

[0111] The manager obtains the financial business POI from the financial business to be processed, and uses the financial business POI as the navigation area;

[0112] Analyze the transaction node sets of each of the financial service POIs, and extract the transaction completion time of the transaction node sets;

[0113] The transaction completion time of the transaction node set is compared with the transaction plan execution time of the transaction plan, and the transaction node set corresponding to the transaction completion time before the transaction plan execution time is taken as the candidate transaction point set.

[0114] Furthermore, the clustering module further includes:

[0115] Acquire transaction clustering features of each transaction point in the candidate transaction point set;

[0116] The candidate transaction point set is clustered and divided according to the transaction clustering features to obtain multiple candidate transaction point set groups.

[0117] Furthermore, the menu generation module further includes:

[0118] Acquire clustering features of the plurality of candidate transaction point set groups, and set a first transaction security policy for the transaction point set group based on the clustering features;

[0119] Collecting candidate transaction amounts and numbers of candidate transaction points associated with each candidate transaction point set of the plurality of candidate transaction point set groups to obtain a second transaction security policy for the transaction point set group;

[0120] A plurality of transaction menus respectively associated with a plurality of candidate transaction point set groups are obtained according to the first transaction security policy and the second transaction security policy.

[0121] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0122] In addition, each functional unit in each embodiment of the present application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of software functional units. The above is only an implementation method of the present application, and does not limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the specification and drawings of this application, or directly or indirectly used in other related technical fields, is also included in the patent protection scope of the present application.

[0123] The specific implementation methods of the invention are described in detail above, but they are only examples, and the present application is not limited to the specific implementation methods described above. For those skilled in the art, any equivalent modification or substitution of the invention is also within the scope of the present application, and therefore, the equalization, modification, and improvement made without departing from the spirit and principle of the present application should be included in the scope of the present application.

Claims

1. A financial risk security early warning method, characterized in that: include: Acquire a transaction plan for financial business sent by a manager, and extract transaction plan attribute characteristics of the transaction plan; Matching a candidate transaction point set whose transaction completion time is before the transaction plan execution time from the transaction point set library in the navigation area; Clustering is performed from the candidate transaction point set to obtain multiple candidate transaction point set groups; Based on the candidate transaction amounts and the number of candidate transaction points associated with each of the candidate transaction point sets of the plurality of candidate transaction point set groups, a plurality of transaction menus respectively associated with the plurality of candidate transaction point set groups are obtained; Provides managers with a menu to display multiple transactions.

2. The early warning method for financial risk security according to claim 1, characterized in that: The step of obtaining the transaction plan for the financial business sent by the manager and extracting the transaction plan attribute characteristics of the transaction plan further includes: The manager obtains a plurality of pending financial businesses from the financial businesses and sorts the plurality of pending financial businesses according to their risk levels; Obtaining pending financial transactions with the highest risk level, and collecting transaction plans in the pending financial transactions; The corresponding trading plan attribute features are extracted from the trading plan, and the trading plan attribute features at least include the trading plan execution time of the trading plan.

3. The early warning method for financial risk security according to claim 2, characterized in that: The step of matching a candidate transaction point set whose transaction completion time is before the transaction plan execution time from the transaction point set library of the navigation area also includes: The manager obtains the financial business POI from the financial business to be processed, and uses the financial business POI as the navigation area; Analyze the transaction node sets of each of the financial service POIs, and extract the transaction completion time of the transaction node sets; The transaction completion time of the transaction node set is compared with the transaction plan execution time of the transaction plan, and the transaction node set corresponding to the transaction completion time before the transaction plan execution time is taken as the candidate transaction point set.

4. The early warning method for financial risk security as claimed in claim 3, characterized in that: The step of clustering the candidate transaction point sets to obtain a plurality of candidate transaction point set groups further comprises: Acquire transaction clustering features of each transaction point in the candidate transaction point set; The candidate transaction point set is clustered and divided according to the transaction clustering features to obtain multiple candidate transaction point set groups.

5. The early warning method for financial risk security as claimed in claim 4, characterized in that: The method of obtaining multiple transaction menus respectively associated with the multiple candidate transaction point sets based on the candidate transaction amounts and the number of candidate transaction points associated with each candidate transaction point set of the multiple candidate transaction point set groups further includes: Acquire clustering features of the plurality of candidate transaction point set groups, and set a first transaction security policy for the transaction point set group based on the clustering features; Collecting candidate transaction amounts and numbers of candidate transaction points associated with each candidate transaction point set of the plurality of candidate transaction point set groups to obtain a second transaction security policy for the transaction point set group; A plurality of transaction menus respectively associated with a plurality of candidate transaction point set groups are obtained according to the first transaction security policy and the second transaction security policy.

6. An early warning device for financial risk security, characterized in that: include: A plan collection module, which obtains the transaction plan for financial business sent by the manager and extracts the transaction plan attribute characteristics of the transaction plan; A navigation matching module, matching a candidate transaction point set whose transaction completion time is before the transaction plan execution time from a transaction point set library of the navigation area; A clustering module, clustering the candidate transaction point set to obtain multiple candidate transaction point set groups; A menu generation module, based on the candidate transaction amounts and the number of candidate transaction points associated with each of the candidate transaction point sets of the plurality of candidate transaction point set groups, obtains a plurality of transaction menus respectively associated with the plurality of candidate transaction point set groups; The display module provides managers with multiple transaction menus.

7. The early warning device for financial risk security according to claim 6, characterized in that: The plan acquisition module further includes: The manager obtains a plurality of pending financial businesses from the financial businesses and sorts the plurality of pending financial businesses according to their risk levels; Obtaining pending financial transactions with the highest risk level, and collecting transaction plans in the pending financial transactions; The corresponding trading plan attribute features are extracted from the trading plan, and the trading plan attribute features at least include the trading plan execution time of the trading plan.

8. The early warning device for financial risk security as claimed in claim 7, characterized in that: The navigation matching module further includes: The manager obtains the financial business POI from the financial business to be processed, and uses the financial business POI as the navigation area; Analyze the transaction node sets of each of the financial service POIs, and extract the transaction completion time of the transaction node sets; The transaction completion time of the transaction node set is compared with the transaction plan execution time of the transaction plan, and the transaction node set corresponding to the transaction completion time before the transaction plan execution time is taken as the candidate transaction point set.

9. The early warning device for financial risk security according to claim 8, characterized in that: The clustering module further includes: Acquire transaction clustering features of each transaction point in the candidate transaction point set; The candidate transaction point set is clustered and divided according to the transaction clustering features to obtain multiple candidate transaction point set groups.

10. The early warning device for financial risk security according to claim 9, characterized in that: The menu generation module further includes: Acquire clustering features of the plurality of candidate transaction point set groups, and set a first transaction security policy for the transaction point set group based on the clustering features; Collecting candidate transaction amounts and numbers of candidate transaction points associated with each candidate transaction point set of the plurality of candidate transaction point set groups to obtain a second transaction security policy for the transaction point set group; A plurality of transaction menus respectively associated with a plurality of candidate transaction point set groups are obtained according to the first transaction security policy and the second transaction security policy.

Images