Associated transaction determination method and device based on hybrid resource service

By processing hybrid resource service transaction data on the blockchain, combined with the detection rule set, the associated transactions are identified, which solves the problem of difficulty in monitoring transaction risks on the blockchain, and achieves efficient and precise protection of transaction data.

CN119515374APending Publication Date: 2025-02-25SUN YAT SEN UNIV +1
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202411499312.1
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-10-25
Publication Date
2025-02-25

AI Technical Summary

Technical Problem

The prior art is difficult to accurately identify and track related transactions based on blockchain hybrid resource services, resulting in difficulty in monitoring and tracking transaction risks on blockchain.

Method used

By obtaining a list of resource access transactions involving hybrid resource services, anonymous reward resource distribution records, and relevant resource transaction lists that do not involve hybrid resource services, combined with a preset detection rule set, these transaction data are processed to determine the target transaction combination that meets the preset requirements, thereby identifying the associated transactions.

Benefits of technology

It realizes efficient and accurate identification of related transactions based on blockchain hybrid resource services, supports subsequent transaction risk detection and tracking, and protects the security of blockchain transaction data.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119515374A_ABST
    Figure CN119515374A_ABST
Patent Text Reader

Abstract

The invention provides a hybrid resource service-based associated transaction determination method and apparatus, which can be applied to the technical field of block chains. Based on the method, a resource access transaction list related to the hybrid resource service and an anonymous reward resource issuing record related to the hybrid resource service can be firstly acquired; obtaining a related resource transaction list which does not relate to the hybrid resource service according to the storage address and the fetching address which relate to the hybrid resource service; according to a preset detection rule set, determining associated transactions by processing a resource access transaction list involving the hybrid resource service, a reward resource issuing record involving the hybrid resource service and a related resource transaction list not involving the hybrid resource service; wherein the preset detection rule set at least comprises a related resource transaction association rule and an anonymous reward association rule. Therefore, the associated transaction based on the block chain hybrid resource service can be efficiently and accurately identified and determined.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This specification belongs to the field of blockchain technology, and in particular to a method and device for determining associated transactions based on hybrid resource services. Background Art

[0002] Blockchain technology has attracted more and more attention due to its decentralization, difficulty in traceability, and high privacy, and has been widely used in transaction data processing scenarios.

[0003] However, the above characteristics of blockchain technology also create difficulties for monitoring and tracking transaction risks. Especially for blockchain-based hybrid resource services (for example, Tornado Cash), such hybrid resource services will further mix the encrypted resource transactions of multiple users on the basis of blockchain to break the original transaction link and further conceal the source and destination of resources. As a result, based on existing methods, it is often difficult to accurately find related transactions based on hybrid resource services, which in turn affects the monitoring and tracking of risky transactions on the blockchain.

[0004] To address the above problems, no effective solution has been proposed yet. Summary of the invention

[0005] This specification provides a method and device for determining related transactions based on hybrid resource services, which can track and determine related transactions based on blockchain hybrid resource services more efficiently and accurately.

[0006] This specification provides a method for determining an associated transaction based on a hybrid resource service, including:

[0007] Obtaining a resource access transaction list involving a hybrid resource service and an anonymous reward resource issuance record involving a hybrid resource service; wherein the resource access transaction list involving a hybrid resource service at least includes a deposit address and a withdrawal address involving a hybrid resource service;

[0008] According to the deposit address and withdrawal address involving the hybrid resource service, obtain the relevant resource transaction list not involving the hybrid resource service;

[0009] According to a preset detection rule set, a resource access transaction list involving a hybrid resource service, a reward resource issuance record involving a hybrid resource service, and a related resource transaction list not involving a hybrid resource service are processed to determine a target transaction combination that meets preset requirements; wherein the preset detection rule set includes at least: a related resource transaction association rule and an anonymous reward association rule;

[0010] According to the target transaction combination, associated transactions are determined.

[0011] In one embodiment, the preset detection rule set also includes: address reuse association rules, transaction fee association rules, and multi-transaction matching association rules.

[0012] In one embodiment, obtaining a resource access transaction list involving a hybrid resource service includes:

[0013] Get the contract address of the hybrid resource pool;

[0014] According to the contract address of the hybrid resource pool, collect transaction data involving hybrid resource services;

[0015] According to the function type of the transaction function triggered by the transaction data, the transaction data is divided into deposit transaction data and withdrawal transaction data; wherein the function type includes a withdrawal transaction function and a deposit transaction function;

[0016] According to the preset feature processing rules, the deposit transaction data and the retrieval transaction data are processed respectively, the corresponding transaction features are obtained and used, and a resource access transaction list involving the hybrid resource service is established.

[0017] In one embodiment, in the resource access transaction list involving the hybrid resource service, the transaction characteristics of the retrieval transaction data at least include: the retrieval address, and the transaction characteristics of the deposit transaction data at least include: the deposit address;

[0018] Accordingly, according to the preset feature processing rules, the deposit transaction data and the retrieval transaction data are processed respectively to obtain corresponding transaction features, including:

[0019] According to the preset feature processing rules, the stored transaction data is retrieved to determine the first key field; and the fields in the adjacent range after the first key field are extracted as the storage address;

[0020] According to the preset feature processing rules, a specified data segment is intercepted from the retrieved transaction data; the specified data segment is retrieved to determine the second key field; and the fields in the adjacent range after the second key field are extracted as the retrieval address.

[0021] In one embodiment, obtaining anonymous reward resource issuance records involving a hybrid resource service includes:

[0022] Get the reward transaction data by crawling the transaction data of the withdrawal transaction function triggered in the anonymous reward contract of the hybrid resource service;

[0023] Locate a designated data segment in the reward transaction data; and determine and extract the first type of reward data in the designated data segment based on a third key field;

[0024] Determine in the reward transaction data and extract the reward receiving address of the second type of reward data according to the fourth key field; wherein the user terminal converts the first type of reward data into the second type of reward data based on the anonymous reward contract, and receives the corresponding second type of reward data through the reward receiving address;

[0025] Based on the first category of reward data and reward receiving addresses, an anonymous reward resource distribution record involving mixed resource services is established.

[0026] In one embodiment, according to the deposit address and withdrawal address involving the hybrid resource service, a list of related resource transactions not involving the hybrid resource service is obtained, including:

[0027] Calling a preset program tool to query the blockchain and obtain transaction data involving the transfer of other resources other than the hybrid resources that occurred before the transaction data involving the hybrid resource service as the initial transaction data;

[0028] Retrieving the initial transaction data, determining and extracting the relevant address of the initial transaction data based on the first key field and the fifth key field; and detecting whether the relevant address matches the deposit address or withdrawal address involved in the hybrid resource service;

[0029] In the case where it is determined that the relevant address of the initial transaction data matches the deposit address or withdrawal address involving the hybrid resource service, the initial transaction data is determined as the relevant transaction data;

[0030] Based on the relevant transaction data, a list of relevant resource transactions that do not involve mixed resource services is constructed.

[0031] In one embodiment, when the preset detection rule set includes: anonymous reward association rule, according to the preset detection rule set, the resource access transaction list involving the hybrid resource service, the reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service are processed to determine the target transaction combination that meets the preset requirements, including:

[0032] According to the anonymous reward resource distribution record of the hybrid resource service, obtain the corresponding first-category reward data and reward receiving address;

[0033] According to the resource access transaction list involving the hybrid resource service, check whether the reward receiving address belongs to the withdrawal address of the hybrid resource pool;

[0034] When it is determined that the reward address belongs to the withdrawal address of the hybrid resource pool, the withdrawal transaction data involving the hybrid resource service based on the withdrawal address is determined; and the block number of the first type of reward data and the block number of the withdrawal transaction data are obtained by querying the blockchain;

[0035] According to the block number of the first type of reward data and the block number of the retrieved transaction data, the block number of the potential transaction data satisfying the preset numerical relationship is determined;

[0036] According to the block number of the potential transaction data, by querying the blockchain, determine whether there is potential transaction data that meets the requirements;

[0037] When it is determined that the potential transaction data exists, the transaction data and the potential transaction data are retrieved and determined as a target transaction combination.

[0038] In one embodiment, when the preset detection rule set includes: related resource transaction association rules, according to the preset detection rule set, the resource access transaction list involving the hybrid resource service, the reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service are processed to determine the target transaction combination that meets the preset requirements, including:

[0039] According to the list of related resource transactions that do not involve hybrid resource services, check whether there are any transactions in the related transactions where the transaction initiation address belongs to the contract address of the hybrid resource pool and the transaction receiving address belongs to the contract address of the hybrid resource pool;

[0040] When a transaction of interest is detected, a transaction receiving address of the transaction of interest is obtained; and whether the transaction receiving address of the transaction of interest belongs to a preset service class address;

[0041] In the case where it is determined that the transaction receiving address of the transaction of interest does not belong to the preset service class address, obtaining the transaction initiating address of the transaction of interest;

[0042] A resource access transaction list involving the hybrid resource service is queried, and transaction data related to the initiating address of the transaction of interest and the receiving address of the transaction of interest are determined as the target transaction combination.

[0043] In one embodiment, after determining the associated transactions according to the target transaction combination, the method further includes:

[0044] Build a transaction resource link graph based on related transactions;

[0045] Detect whether there is transaction risk based on the transaction resource link diagram;

[0046] When it is determined that there is a transaction risk, the risk account with the transaction risk is determined based on the transaction resource link diagram.

[0047] This specification also provides a device for determining an associated transaction based on a hybrid resource service, including:

[0048] A first acquisition module is used to acquire a resource access transaction list involving a hybrid resource service and an anonymous reward resource issuance record involving a hybrid resource service; wherein the resource access transaction list involving a hybrid resource service at least includes a deposit address and a withdrawal address involving a hybrid resource service;

[0049] The second acquisition module is used to acquire a list of related resource transactions not involving the hybrid resource service according to the deposit address and withdrawal address involving the hybrid resource service;

[0050] A processing module, for processing a resource access transaction list involving a hybrid resource service, a reward resource issuance record involving a hybrid resource service, and a related resource transaction list not involving a hybrid resource service according to a preset detection rule set, and determining a target transaction combination that meets preset requirements; wherein the preset detection rule set includes at least: a related resource transaction association rule and an anonymous reward association rule;

[0051] The determination module is used to determine the associated transactions according to the target transaction combination.

[0052] Based on the method and device for determining associated transactions based on hybrid resource services provided in this specification, a resource access transaction list involving hybrid resource services and anonymous reward resource issuance records involving hybrid resource services can be obtained first; and according to the deposit address and withdrawal address involving hybrid resource services, a list of related resource transactions not involving hybrid resource services can be obtained; then, according to a preset detection rule set, by processing the resource access transaction list involving hybrid resource services, the reward resource issuance records involving hybrid resource services, and the list of related resource transactions not involving hybrid resource services, the associated transactions can be determined; wherein, the preset detection rule set includes at least: related resource transaction association rules, anonymous reward association rules. Thus, the associated transactions based on the blockchain hybrid resource service can be identified and determined more efficiently and accurately. Then, according to the above-mentioned associated transactions, a corresponding transaction resource link diagram can be constructed; then, according to the transaction resource link diagram, the related transactions based on the blockchain hybrid resource service can be effectively monitored and tracked, and then the risk accounts with transaction risks can be accurately detected and identified, and the transaction data security on the blockchain can be protected. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] In order to more clearly illustrate the embodiments of this specification, the drawings required for use in the embodiments will be briefly introduced below. The drawings described below are only some embodiments recorded in this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0054] Figure 1It is a flowchart of a method for determining an associated transaction based on a hybrid resource service provided by an embodiment of this specification;

[0055] Figure 2 It is a schematic diagram of an embodiment of a method for determining an associated transaction based on a hybrid resource service provided by an embodiment of this specification, in a scenario example;

[0056] Figure 3 It is a schematic diagram of an embodiment of a method for determining an associated transaction based on a hybrid resource service provided by an embodiment of this specification, in a scenario example;

[0057] Figure 4 It is a schematic diagram of an embodiment of a method for determining an associated transaction based on a hybrid resource service provided by an embodiment of this specification, in a scenario example;

[0058] Figure 5 It is a schematic diagram of an embodiment of a method for determining an associated transaction based on a hybrid resource service provided by an embodiment of this specification, in a scenario example;

[0059] Figure 6 It is a schematic diagram of an embodiment of a method for determining an associated transaction based on a hybrid resource service provided by an embodiment of this specification, in a scenario example;

[0060] Figure 7 It is a schematic diagram of the structure of a server provided by an embodiment of this specification;

[0061] Figure 8 It is a schematic diagram of the structure of a device for determining an associated transaction based on a hybrid resource service provided by an embodiment of the present specification;

[0062] Fig. 9 It is a schematic diagram of an embodiment of a method for determining associated transactions based on hybrid resource services provided by an embodiment of this specification, in a scenario example. DETAILED DESCRIPTION

[0063] In order to enable those skilled in the art to better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below in conjunction with the drawings in the embodiments of this specification. Obviously, the described embodiments are only part of the embodiments of this specification, not all of the embodiments. Based on the embodiments in this specification, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of this specification.

[0064] It should be noted that the user-related information and data involved in the embodiments of this specification are all information and data authorized by the user or fully authorized by relevant parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data comply with relevant laws, regulations and standards, take necessary confidentiality measures, do not violate public order and good morals, and provide corresponding operation entrances for users or relevant parties to choose to authorize or refuse.

[0065] It should also be noted that in the embodiments of this specification, certain software, components, models and other existing solutions in the industry may be mentioned. They should be regarded as exemplary. Their purpose is only to illustrate the feasibility of implementing the technical solution of this application, but it does not mean that the applicant has or will necessarily use the solution.

[0066] See also Figure 1 As shown, the embodiment of this specification provides a method for determining associated transactions based on hybrid resource services.

[0067] The method is specifically applied to the server side. When implemented, the method may include the following contents:

[0068] S101: Acquire a resource access transaction list involving a hybrid resource service and an anonymous reward resource issuance record involving a hybrid resource service; wherein the resource access transaction list involving a hybrid resource service at least includes a deposit address and a withdrawal address involving the hybrid resource service;

[0069] S102: Obtain a list of related resource transactions not involving the hybrid resource service according to the deposit address and withdrawal address involving the hybrid resource service;

[0070] S103: According to a preset detection rule set, a resource access transaction list involving a hybrid resource service, a reward resource issuance record involving a hybrid resource service, and a related resource transaction list not involving a hybrid resource service are processed to determine a target transaction combination that meets preset requirements; wherein the preset detection rule set includes at least: a related resource transaction association rule and an anonymous reward association rule;

[0071] S104: Determine associated transactions according to the target transaction combination.

[0072] Among them, the above-mentioned hybrid resource service may specifically include a hybrid resource service based on blockchain.

[0073] Specifically, the above-mentioned hybrid resource service can further mix the resources uploaded by users to the blockchain on the basis of the blockchain, so as to break the original transaction link and blur the transaction path, so as to better conceal the source and destination of the resources and improve transaction privacy.

[0074] The above-mentioned resource can specifically be an encrypted transaction resource. For example, the above-mentioned resource can be encrypted and protected fund data based on blockchain, encrypted and protected points data based on blockchain, encrypted and protected token data based on blockchain, and so on. Of course, it should be noted that the resources listed above are only a schematic description. During specific implementation, according to specific application scenarios and processing requirements, the above-mentioned resources may also include other types of resource data. This specification does not limit this.

[0075] The above blockchain can be specifically understood as a decentralized distributed ledger technology that uses cryptographic methods to ensure the security and credibility of data exchange and records. Specifically, the blockchain can connect multiple blocks to form a chain structure based on the block header hash value. Each block consists of transactions generated within a period of time, which are packaged by computer nodes that have obtained the right to record and independently verified by each computer node.

[0076] Specifically, for example, the above-mentioned hybrid resource service can be Tornado Cash of Ethereum.

[0077] In specific implementation, hybrid resource services can use smart contracts and Zero-Knowledge Succinct Non-interactive Argument of Knowledge (zk-SNARKs) technology to achieve the mixing and privacy protection of transaction resources.

[0078] Specifically, based on the above hybrid resource service, first, the user can initiate a deposit transaction (or deposit transaction data) about depositing resources into the hybrid resource service through the user terminal. In specific implementation, an address on the blockchain (which can be recorded as the deposit address) can be used to deposit the selected specified amount of resources into the hybrid resource pool based on the hybrid resource service.

[0079] For example, a user can select a 1ETH pool and deposit 1ETH of resources into a smart contract of a hybrid resource service (e.g., a Tornado Cash smart contract). At this time, the smart contract can generate a unique secret data (which can be recorded as a note). The secret data contains the private information of the deposited resources. The user terminal holds and keeps the secret data.

[0080] Then, the smart contract of the mixed resource service can use concise non-interactive zero-knowledge proof to mix the resources deposited by the user with the resources deposited by other users.

[0081] For example, a smart contract for a mixed resource service could use zk-SNARKs technology to mix the received resources together to ensure the privacy of the transaction while proving that the funds have been deposited without revealing the specific source.

[0082] When a user wants to withdraw the stored resources from the hybrid resource service, he can initiate a withdrawal transaction (or withdrawal transaction data) to withdraw the stored resources from the hybrid resource service through the user terminal. In specific implementation, other addresses on the blockchain that are different from the deposit address (which can be recorded as withdrawal addresses) can be used, and secret data can be used as credentials to extract the corresponding resources from the hybrid resource pool and return them to the user to complete the resource withdrawal operation.

[0083] For example, users do not need to use the same address as the deposit address, but can use the note as a credential to request resource extraction from the smart contract of the hybrid resource service to further increase privacy. The smart contract can first verify the legitimacy of the note, and execute the resource extraction operation if the verification is confirmed to be passed. Users can choose to extract the resource to a new address that is different from the previously used deposit address, thereby severing the association with the original deposit address and hiding the association information between transactions.

[0084] In this way, users can utilize blockchain-based hybrid resource services to realize transaction data processing for operations such as depositing and withdrawing resources while effectively protecting transaction privacy.

[0085] The applicant has combined the specific practice process and found through research that when using the blockchain-based hybrid resource service to process transaction data for operations such as depositing and withdrawing resources, each transaction initiated on the blockchain requires payment of a corresponding transaction fee (or transaction fee, for example, gas price). However, sometimes the assets of the new deposit address used are 0. At this time, in order to smoothly extract the resources to the new address, the hybrid resource service can also introduce a repeater service. Specifically, a withdrawal transaction for previously deposited resources can be initiated through a repeater, and the recipient needs to pay a small portion of the withdrawn resources to the repeater as a transaction fee.

[0086] The above transaction fees are often determined based on the market supply and demand relationship, network congestion, and the user's willingness to pay. Therefore, different transactions involving hybrid resource services initiated by the same user (including withdrawal transactions and deposit transactions, etc.) will show some common characteristics that distinguish them from other customers. Therefore, the above transaction service fees can, in some cases, reflect the implicit correlation between different transactions involving hybrid resource services based on the same user. Accordingly, it is possible to consider using the above characteristics to find out the associated transactions with implicit correlation in hybrid resource services.

[0087] Furthermore, the applicant also found that: in the specified reward time period (for example, from February 2020 to December 2021), in order to encourage more resources to be deposited into the hybrid resource pool for the hybrid resource service to obtain a larger anonymity set and better mixing effect, a corresponding anonymous reward contract (a smart contract for anonymous rewards for hybrid resource services) was set up and introduced to encourage users to deposit resources in the hybrid resource pool.

[0088] Specifically, based on the anonymous reward contract, users can be rewarded with a corresponding number of anonymous points (AP) according to the length of time they keep resources in the hybrid resource pool, which can be recorded as the first type of reward data. Generally, the longer the resources are stored in the hybrid resource pool, the more first type of reward data will be obtained.

[0089] When a user wants to withdraw the deposited resources from the hybrid resource pool, the first type of reward data can be withdrawn; then, the user can convert the first type of reward data into the second reward data (e.g., TORN) that can be used on the blockchain through the internal mechanism of the smart contract of the hybrid resource service (e.g., Automated Market Maker, AMM). The above process can be recorded in the anonymous reward contract.

[0090] Based on the above reward method, different transactions with implicit associations will satisfy certain numerical relationships with the corresponding first-category reward data in the blockchain storage location. Accordingly, we can consider using the above characteristics to find out the associated transactions with implicit associations in the hybrid resource service.

[0091] In addition, the applicant also found that different transactions involving hybrid resource services that are associated are often initiated by the same user (or the same subject). Although the addresses used in the hybrid resource service are different and the corresponding addresses cannot directly reflect the correlation, there is a high probability that there will be interactions in other blockchain services that do not involve hybrid resource services to prove that the relevant addresses point to the same user. Based on the above clues, it is possible to find associated transactions with implicit associations in the hybrid resource service.

[0092] The applicant noticed the above-mentioned characteristics of the specific implementation of the hybrid resource service based on blockchain. After creative thinking, he thought that by obtaining and utilizing the resource access transaction list involving the hybrid resource service, the anonymous reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service, combined with the corresponding preset detection rule set, the transactions involving the hybrid resource service, the related transactions not involving the hybrid resource service, and the rewards involving the hybrid resource service can be sorted and tracked from multiple different dimensions, thereby being able to more efficiently and accurately mine and identify the related transactions involving the hybrid resource service, and then perform corresponding transaction risk detection and transaction risk tracking based on the identified related transactions, thereby effectively protecting the data security of transaction data processing on the blockchain.

[0093] In some embodiments, the above-mentioned preset detection rule set may at least include: related resource transaction association rules and anonymous reward association rules.

[0094] The above-mentioned preset detection rule set may specifically include transaction association rules for detecting and determining transaction association rules involving hybrid resource services.

[0095] The above-mentioned related resource transaction association rules can find out the related transactions involving hybrid resource services that may have implicit association relationships from the dimension of related transactions not involving hybrid resource services.

[0096] The anonymous reward association rule can find out the associated transactions involving the hybrid resource service that may have an implicit association relationship from the dimension of the reward involving the hybrid resource service.

[0097] In some embodiments, the above-mentioned preset detection rule set may further include: address reuse association rules, transaction fee association rules, multi-transaction matching association rules, etc.

[0098] Among them, the above-mentioned address reuse association rule can find out the associated transactions involving hybrid resource services that may have implicit association relationships from the dimension of transaction addresses involving hybrid resource services.

[0099] The transaction cost association rule can find out the associated transactions involving hybrid resource services that may have implicit association relationships from the dimension of transaction costs involving hybrid resource services.

[0100] The above-mentioned multi-transaction matching association rule can find out the associated transactions involving the hybrid resource service that may have an implicit association relationship from the dimension of the total amount of resources involved in multiple transactions involving the hybrid resource service.

[0101] Based on the above embodiments, by introducing and using a preset detection rule set that includes relatively rich and diverse transaction association rules based on multiple different dimensions, the associated transactions involving hybrid resource services can be accurately and comprehensively identified and determined, effectively reducing errors caused by missed detections and false detections.

[0102] Before specific implementation, a large amount of historical transaction data involving hybrid resource services can be obtained and classified and learned based on expert experience, and association rules for different dimensions can be determined by summarizing formal heuristic rules, thereby constructing a more comprehensive and effective preset detection rule set.

[0103] In some embodiments, during specific implementation, the resource access transaction list involving the hybrid resource service, the reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service can be processed according to a preset detection rule set to determine at least two transaction data involving the hybrid resource service that hit at least one association rule in the preset detection rule set as a target transaction combination that meets the preset requirements; then, based on the target transaction combination, the hit parameters of each target transaction combination that hits the association rule are counted separately; based on the hit parameters, the associated transactions involving the hybrid resource service that actually have an implicit association relationship are further determined from the target transaction combination.

[0104] The above-mentioned hit parameter set may specifically include: the number of hit association rules and the rule identifiers of the hit association rules.

[0105] In specific implementation, it is possible to first detect whether the number of hit association rules is greater than or equal to a preset quantity threshold (for example, 3) based on the hit parameters of the target transaction combination; when it is determined to be greater than or equal to the preset quantity threshold, the target transaction combination can be determined as an associated transaction.

[0106] On the contrary, when it is determined that the quantity is less than the preset threshold, the hit association rule can be determined according to the rule identifier of the hit parameter of the target transaction combination; the current rule risk weight table is queried to determine the risk weight of the hit association rule, and a combination operation is performed to obtain the corresponding association risk value; the association risk value is then detected to be greater than or equal to the preset association risk threshold; when it is determined that it is greater than or equal to the preset association risk threshold, the target transaction combination can be determined as an associated transaction. Otherwise, the target transaction combination can be determined as an unassociated transaction.

[0107] In specific implementation, the association rule hit records of the current target time period can be queried every target time period (for example, every week); based on the association rule hit records of the current target time period, the hit frequencies of different association rules in the current time period are counted; then, based on the hit frequencies of different rules and in combination with the corresponding mapping relationships, the risk weights of the association rules in the rule risk weight table are adjusted and updated to obtain the current rule risk weight table that matches the current time period.

[0108] Based on the above embodiments, the target transaction combination can be determined more accurately and efficiently according to the preset detection rule set; further, the related transactions can be accurately determined according to the current rule risk weight table.

[0109] In some embodiments, after determining the associated transactions according to the target transaction combination, referring to Figure 2 As shown, when the method is implemented specifically, it may also include the following contents:

[0110] S1: Build a transaction resource link graph based on related transactions;

[0111] S2: Detect whether there is a transaction risk based on the transaction resource link diagram;

[0112] S3: When it is determined that there is a transaction risk, the risk account with the transaction risk is determined according to the transaction resource link diagram.

[0113] In specific implementation, a pre-trained preset link graph recognition model based on a graph algorithm can be used to process the transaction resource link graph to obtain and output the corresponding resource link graph processing result.

[0114] Among them, the above-mentioned preset link graph recognition model is pre-trained using a large number of sample transaction resource link graphs, and can perform graph data processing and analysis based on the input transaction resource links, and automatically detect and identify neural network models with transaction risks.

[0115] During specific implementation, it can be determined whether there is a transaction risk based on the processing results of the resource chain diagram.

[0116] When it is determined that there is a transaction risk based on the processing results of the resource chain map, the risky transaction with the transaction risk can also be located and determined in the transaction resource chain map based on the processing results of the resource chain map; and then the risky account with the transaction risk can be queried and determined based on the relevant addresses of the risky transaction.

[0117] After determining the risk account with transaction risk, a risk tag can be set for the risk account so that the risk account can be continuously monitored based on the risk tag in the future; the resource transfer limit of the risk account can also be lowered, or even the risk account can be prohibited from trading.

[0118] Based on the above embodiments, a corresponding transaction resource chain diagram can be constructed according to the associated transactions, and then the transaction resource chain diagram can be used to accurately detect and process transaction risks, which can effectively protect the resource data security of blockchain-based transaction data processing.

[0119] In some embodiments, see Figure 3 As shown, the above acquisition of the resource access transaction list involving the hybrid resource service may include the following contents during specific implementation:

[0120] S1: Get the contract address of the hybrid resource pool;

[0121] S2: Collect transaction data involving hybrid resource services based on the contract address of the hybrid resource pool;

[0122] S3: dividing the transaction data into deposit transaction data and withdrawal transaction data according to the function type of the transaction function triggered by the transaction data; wherein the function type includes a withdrawal transaction function and a deposit transaction function;

[0123] S4: According to the preset feature processing rules, the deposit transaction data and the retrieval transaction data are processed respectively, and the corresponding transaction features are obtained and used to establish a resource access transaction list involving the hybrid resource service.

[0124] In specific implementation, the full contract address of the hybrid resource pool can be obtained by crawling the smart contract of the hybrid resource service.

[0125] In specific implementation, transaction data involving hybrid resource services is further crawled according to the contract address. When the crawled transaction data has a trigger function deposit, it is determined that the function type triggered by the transaction data is a deposit transaction function, and the transaction data can be determined as deposit transaction data (for example, a deposit transaction). On the contrary, when the crawled transaction data has a trigger function withdraw, it is determined that the function type triggered by the transaction data is a withdrawal transaction function, and the transaction data can be determined as withdrawal transaction data (for example, a withdrawal transaction).

[0126] The resource access transaction list involving the hybrid resource service may specifically store transaction features related to withdrawal transactions and deposit transactions involving the hybrid resource service.

[0127] Based on the above embodiments, a resource access transaction list involving a hybrid resource service can be automatically obtained relatively efficiently.

[0128] In some embodiments, in a resource access transaction list involving a hybrid resource service, transaction characteristics of retrieval transaction data may include at least: a retrieval address (eg, recipient_address), and transaction characteristics of deposit transaction data may include at least: a deposit address (eg, from_address).

[0129] Accordingly, the above-mentioned processing of the deposited transaction data and the retrieved transaction data according to the preset feature processing rules to obtain the corresponding transaction features may include:

[0130] According to the preset feature processing rules, the stored transaction data is retrieved to determine the first key field; and the fields in the adjacent range after the first key field are extracted as the storage address;

[0131] According to the preset feature processing rules, a specified data segment is intercepted from the retrieved transaction data; the specified data segment is retrieved to determine the second key field; and the fields in the adjacent range after the second key field are extracted as the retrieval address.

[0132] Based on the above embodiments, the transaction characteristics of depositing transaction data and the transaction characteristics of retrieving transaction data can be extracted more accurately, and then a resource access transaction list involving hybrid resource services that meets the requirements can be constructed based on the above transaction characteristics.

[0133] In specific implementation, the transaction features of the transaction data may also include: transaction hash value (e.g., transaction_hash), transaction fee (e.g., gas price), hybrid resource pool address (e.g., pool_address), block number on the blockchain (e.g., block_number), and other related features.

[0134] The transaction features of the stored transaction data may also include: transaction hash value, deposit transaction fee, hybrid resource pool address, block number on the blockchain and other related features.

[0135] The transaction hash value is used to identify a transaction (deposit transaction or withdrawal transaction) occurring on the blockchain in a one-to-one correspondence.

[0136] The above hybrid resource pool is used to identify the hybrid resource pool associated with the resources involved in the transaction. For more complex hybrid resource services, a variety of different hybrid resource pools can be provided for users to choose; each hybrid resource pool corresponds to a smart contract for a hybrid resource service; different hybrid resource pools can support the deposit and withdrawal of resources in different units. For example, the 1ETH hybrid resource pool supports the deposit or withdrawal of an integer number of ETH at a time, while the 0.1ETH hybrid resource pool supports the deposit or withdrawal of an integer number of 0.1ETH at a time.

[0137] The block number on the above blockchain is the block number of the block on the blockchain used to record the corresponding transaction.

[0138] In specific implementation, the corresponding transaction features can be extracted and integrated for each deposit transaction data to construct a deposit transaction list (for example, deposit_txs); at the same time, the corresponding transaction features can be extracted and integrated for each withdrawal transaction data to construct a withdrawal transaction list (for example, withdraw_txs); and the above deposit transaction list and withdrawal transaction list can be combined to obtain a resource access transaction list involving hybrid resource services.

[0139] When extracting corresponding transaction features from deposited transaction data, the field "from" can be retrieved and determined as the first key field according to preset feature processing rules; then the fields in the adjacent range after the first key field are located and extracted to obtain the required deposit address.

[0140] For the withdrawal transaction data, due to the existence of the repeater, the real withdrawal address is not the address in the adjacent range after the field from in the withdrawal transaction data, but is hidden in the Input Data of the transaction data. Therefore, when extracting the corresponding transaction features, the Input Data can be determined and intercepted from the withdrawal transaction data as the specified data segment according to the preset feature processing rules; then, in the specified data segment, the field "_recipient" is retrieved and determined as the second key field; and then the fields in the adjacent range after the above second key field are located for extraction to obtain the required withdrawal address.

[0141] In some embodiments, see Figure 4 As shown, the above acquisition of anonymous reward resource issuance records involving hybrid resource services may include the following contents during specific implementation:

[0142] S1: Get reward transaction data by crawling the transaction data of the withdrawal transaction function triggered in the anonymous reward contract of the hybrid resource service;

[0143] S2: Locate a designated data segment in the reward transaction data; and determine and extract the first type of reward data in the designated data segment based on the third key field;

[0144] S3: Determine in the reward transaction data and extract the reward receiving address of the second type of reward data according to the fourth key field; wherein the user terminal converts the first type of reward data into the second type of reward data based on the anonymous reward contract, and receives the corresponding second type of reward data through the reward receiving address;

[0145] S4: Based on the first category of reward data and the reward receiving address, an anonymous reward resource issuance record involving the mixed resource service is established.

[0146] Based on the above embodiments, anonymous reward resource issuance records involving hybrid resource services can be automatically obtained relatively efficiently.

[0147] In specific implementation, the transaction data that triggers the withdraw function in the anonymous reward contract for the hybrid resource service (for example, the anonymous mining contract 0x746Aebc06D2aE31B71ac51429A19D54E797878E9) can be crawled as the reward transaction data. For the reward transaction data, the Input Data can be located as the specified data segment first; then the field "_args.amount" can be further retrieved and located in the specified data segment as the third key field; then the corresponding anonymity points (anonimity_points) can be obtained as the first type of reward data by obtaining the data value of the third key field. At the same time, the field "_args.extData" is retrieved and located in the reward transaction data as the fourth key field; then the address field in the adjacent range after the fourth key field is obtained to obtain the address that actually receives the second type of reward data, that is, the reward receiving address.

[0148] While obtaining the first category of reward data and the reward receiving address, the block number of the first category of reward data (for example, block_number) and the transaction hash value of the reward transaction data (for example, transaction_hash) and other features can be extracted based on the reward transaction data. The above features can then be combined to establish an anonymous reward resource issuance record involving hybrid resource services that is more informative, comprehensive, and effective.

[0149] In some embodiments, see Figure 5 As shown, the above method of obtaining a list of related resource transactions not involving hybrid resource services based on the deposit address and withdrawal address involving hybrid resource services may include the following contents during specific implementation:

[0150] S1: calling a preset program tool to query the blockchain and obtain transaction data involving the transfer of other resources other than hybrid resources that occurred before the transaction data involving the hybrid resource service as initial transaction data;

[0151] S2: Retrieve the initial transaction data, determine and extract the relevant address of the initial transaction data based on the first key field and the fifth key field; and detect whether the relevant address matches the deposit address or withdrawal address involved in the hybrid resource service;

[0152] S3: When it is determined that the relevant address of the initial transaction data matches the deposit address or withdrawal address involved in the hybrid resource service, the initial transaction data is determined as the relevant transaction data;

[0153] S4: Based on the relevant transaction data, a list of relevant resource transactions that do not involve hybrid resource services is constructed.

[0154] Based on the above embodiments, a list of related resource transactions not involving hybrid resource services can be automatically obtained relatively efficiently.

[0155] In specific implementation, the above-mentioned preset program tool may specifically be BlockchainSpider.

[0156] During specific implementation, a preset program tool may be called to query and obtain a specified number of transaction data items involving the transfer of resources other than hybrid resources that occurred before the transaction data involving the hybrid resource service, as initial transaction data.

[0157] The above-mentioned designated number of records may be 10000. In specific implementation, the specific value of the designated number of records may be flexibly set according to the current transaction data processing volume and accuracy requirements.

[0158] The other resources mentioned above may specifically refer to non-hybrid resources, and the resource types of the other resources mentioned above may be the same as or different from the resource types of the resources involved in the hybrid resource service.

[0159] In specific implementation, the relevant addresses involved in the initial transaction data can be found by locating and according to the first key field (e.g., from field) and the fifth key field (e.g., to field) in the initial transaction data; and then by querying the resource access transaction list involving the hybrid resource service, it is determined whether the relevant addresses involved in the initial transaction data are all withdrawal addresses or deposit addresses in the resource access transaction list involving the hybrid resource service. If so, it can be determined that the relevant addresses of the initial transaction data match the deposit address or withdrawal address involving the hybrid resource service; and then the initial transaction data can be determined as relevant transaction data, that is, transaction data that occurs outside the hybrid resource service pool but involves the contract address of the hybrid resource pool.

[0160] Furthermore, the corresponding transaction features can be parsed and extracted based on the relevant transaction data, for example, the transaction hash value, transaction initiation timestamp (timestamp), transaction initiator, transaction recipient, transaction resource value (value), transaction fee and other relevant features can be combined to obtain a richer and more comprehensive list of related resource transactions that do not involve hybrid resource services.

[0161] In some embodiments, when the preset detection rule set includes: anonymous reward association rule, refer to Figure 6 As shown, the above-mentioned processing, according to the preset detection rule set, involves the resource access transaction list involving the hybrid resource service, the reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service, and determines the target transaction combination that meets the preset requirements. When implemented specifically, it may include the following contents:

[0162] S1: According to the anonymous reward resource issuance record of the hybrid resource service, obtain the corresponding first-category reward data and reward receiving address;

[0163] S2: According to the resource access transaction list involving the hybrid resource service, check whether the reward receiving address belongs to the withdrawal address of the hybrid resource pool;

[0164] S3: When it is determined that the reward address belongs to the withdrawal address of the hybrid resource pool, the withdrawal transaction data involving the hybrid resource service based on the withdrawal address is determined; and the block number of the first type of reward data and the block number of the withdrawal transaction data are obtained by querying the blockchain;

[0165] S4: Determine the block number of potential transaction data that meets a preset numerical relationship according to the block number of the first type of reward data and the block number of the extracted transaction data;

[0166] S5: According to the block number of the potential transaction data, determine whether there is potential transaction data that meets the requirements by querying the blockchain;

[0167] S6: When it is determined that the potential transaction data exists, the transaction data and the potential transaction data are retrieved and determined as a target transaction combination.

[0168] Based on the above embodiment, by using the anonymous reward resource issuance record of the hybrid resource service, it is possible to accurately find the target transaction combination that may have an implicit association relationship from the dimension of the reward related to the hybrid resource service.

[0169] In specific implementation, after obtaining the corresponding first-category reward data and reward receiving address, you can first query and verify based on the corresponding timestamp whether the occurrence time of the first-category reward data belongs to the specified reward time period. When it is determined that the occurrence time of the first-category reward data belongs to the specified reward time period, it can be judged that the first-category reward data is reward data generated based on the anonymous reward contract, and subsequent processing can continue. When it is determined that the occurrence time of the first-category reward data does not belong to the specified reward time period, it can be judged that the first-category reward data is not reward data generated based on the anonymous reward contract, and the first-category reward data and other data associated with the first-category reward data, such as the reward receiving address, can be removed from the anonymous reward resource issuance record of the hybrid resource service without subsequent processing.

[0170] In the specific implementation, considering the anonymous reward contract, the longer a resource is deposited in the hybrid resource pool, the greater the data value of the reward data obtained when the resource is withdrawn. Specifically, the first type of reward data is determined based on the block number experienced by the secret data (note) provided when the withdrawal transaction is performed. Accordingly, the larger the block number experienced by the first type of reward data based on the secret data or the deposit transaction, the larger the data value of the corresponding first type of reward data. For example, please refer to Table 1 for the corresponding relationship between the AP data value based on Tornado Cash and the deposit time / block number.

[0171] Table 1

[0172] Instance size(ETH) AP / Block 0.1 10 1 20 10 50 100 400

[0173] Based on the above considerations, it can be further found that there is a preset numerical relationship between the associated retrieval transaction data and the block number stored in the transaction reagent library, and the block number of the first type of reward data obtained when executing the retrieval transaction data:

[0174] deposit_blocks+AP_converted_blocks=withdraw_blocks

[0175] Among them, AP_converted_blocks represents the block number of the first type of reward data, deposit_blocks represents the block number of the deposited transaction data, and withdraw_blocks represents the block number of the withdrawn transaction.

[0176] Furthermore, it is considered that the above-mentioned preset data value relationship can be used to find out the deposit transaction data and withdrawal transaction data with implicit association relationships involving the reward data of the hybrid resource service.

[0177] In specific implementation, when it is determined that the reward receiving address associated with the first type of reward data belongs to the withdrawal address involving the hybrid resource service, further, based on the withdrawal address, the resource access transaction list involving the hybrid resource service can be queried to determine the withdrawal transaction data associated with the first type of reward data, and obtain the transaction hash value of the withdrawal transaction data.

[0178] Then, based on the transaction hash value of the first type of reward data and the transaction hash value of the retrieved transaction data, the block number of the first type of reward data and the block number of the retrieved transaction data are determined by querying the blockchain; then, based on the block number of the first type of reward data and the block number of the retrieved transaction data, a block number that satisfies a preset numerical relationship is calculated as the block number of the potential transaction data.

[0179] Then, according to the block number of the potential transaction data, the blockchain is queried to determine whether there is relevant transaction data on the blockchain. When it is determined that there is no relevant transaction data on the blockchain, it can be determined that there is no transaction associated with the withdrawal transaction data based on the reward data involving the hybrid resource service.

[0180] When it is determined that relevant transaction data exists on the blockchain, the transaction hash value of the transaction data can be obtained as the transaction hash value of the potential transaction data; then, based on the transaction hash value of the potential transaction data, the resource access transaction list involving the hybrid resource service is searched to determine whether there is deposited transaction data that matches the transaction hash value of the potential transaction data.

[0181] If deposit transaction data matching the transaction hash value of the potential transaction data is found in the resource access transaction list involving the hybrid resource service, the deposit transaction data can be determined as the potential transaction data that meets the requirements. Furthermore, the potential transaction data and the retrieval transaction data can be determined as a target transaction combination.

[0182] On the contrary, if deposit transaction data matching the transaction hash value of the potential transaction data is not found in the resource deposit and withdrawal transaction list involving the hybrid resource service, it can be determined that there is no transaction associated with the withdrawal transaction data based on the reward data involving the hybrid resource service.

[0183] In some embodiments, when the preset detection rule set includes: related resource transaction association rules, the above-mentioned processing of the resource access transaction list involving the hybrid resource service, the reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service according to the preset detection rule set, and determining the target transaction combination that meets the preset requirements, when implemented specifically, may include the following contents:

[0184] S1: Based on the list of related resource transactions that do not involve hybrid resource services, detect whether there is a transaction in the related transactions where the transaction initiation address belongs to the contract address of the hybrid resource pool and the transaction receiving address belongs to the contract address of the hybrid resource pool;

[0185] S2: when a transaction of interest is detected, obtaining a transaction receiving address of the transaction of interest; and detecting whether the transaction receiving address of the transaction of interest belongs to a preset service class address;

[0186] S3: When it is determined that the transaction receiving address of the transaction of interest does not belong to the preset service class address, the transaction initiating address of the transaction of interest is obtained;

[0187] S4: Query the resource access transaction list involving the hybrid resource service, and determine the transaction data related to the initiating address of the transaction of interest and the receiving address of the transaction of interest as the target transaction combination.

[0188] Based on the above embodiment, by using the related resource transaction list not involving the hybrid resource service, it is possible to accurately find the target transaction combination that may have an implicit association relationship from the dimension of the related transactions not involving the hybrid resource service.

[0189] In specific implementation, according to the relevant resource transaction association rules, when transaction data whose transaction initiation address and transaction receiving address both belong to the contract address of the hybrid resource pool is determined from the relevant resource transaction list that does not involve the hybrid resource service, the transaction data can be marked as a transaction of interest.

[0190] Furthermore, whether the transaction address of the transaction of interest belongs to a preset service class address can be determined by detecting whether the transaction receiving address of the transaction of interest belongs to a preset service party transaction address list.

[0191] Among them, the preset service provider transaction address includes the full amount of service provider addresses that are registered on the blockchain and provide legal services.

[0192] When it is determined that the transaction address of the transaction of interest belongs to the preset service class address, it can be judged that the transaction of interest is a normal service consumption transaction based on the blockchain, and subsequent processing may not be continued.

[0193] When it is determined that the transaction address of the transaction of interest does not belong to the preset service class address, it can be judged that the actual initiator and the actual recipient of the transaction of interest are likely to be the same user (or the same subject), and further it can be determined that the transaction receiving address and the transaction initiation address of the transaction of interest are the transaction addresses corresponding to the same user.

[0194] At this time, by querying the resource access transaction list involving the hybrid resource service, the withdrawal transaction data whose withdrawal address is at least one of the transaction receiving address and the transaction initiation address of the transaction of interest, and the deposit transaction data whose deposit address is at least one of the transaction receiving address and the transaction initiation address of the transaction of interest can be found as the target transaction combination.

[0195] In some embodiments, when the preset detection rule set includes: address reuse association rules, the above processing of the resource access transaction list involving the hybrid resource service, the reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service according to the preset detection rule set to determine the target transaction combination that meets the preset requirements may include:

[0196] S1: searching and comparing the deposit address of the deposit transaction data and the withdrawal address of the withdrawal transaction data in the resource access transaction list involving the hybrid resource service to determine whether there is deposit transaction data and withdrawal transaction data whose difference value between the deposit address and the withdrawal address is less than or equal to a preset address difference threshold;

[0197] S2: When it is determined that the deposit transaction data and the withdrawal transaction data whose difference value between the deposit address and the withdrawal address is less than or equal to a preset address difference threshold value can be determined as the target transaction combination.

[0198] By finding the withdrawal transaction data and deposit transaction data with the same withdrawal address and deposit address, it is possible to find possible related transactions involving mixed resource services that are likely initiated by the same user.

[0199] Based on the above embodiment, by using the resource access transaction list involving the hybrid resource service, it is possible to accurately find the target transaction combination that may have an implicit association relationship from the dimension of the transaction address involving the hybrid resource service.

[0200] In some embodiments, when the preset detection rule set includes: transaction fee association rules, the above processing of the resource access transaction list involving the hybrid resource service, the reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service according to the preset detection rule set to determine the target transaction combination that meets the preset requirements may include:

[0201] S1: Retrieve and compare the transaction fees for depositing transaction data and the transaction fees for retrieving transaction data in the resource access transaction list involving the hybrid resource service to determine whether there are depositing transaction data and retrieving transaction data whose transaction fee difference value is less than or equal to a preset address difference threshold;

[0202] S2: When it is determined that the transaction exists, the deposit transaction data and the withdrawal transaction data whose transaction fee difference value is less than or equal to the preset address difference threshold value can be determined as the target transaction combination.

[0203] This is because transaction fees are usually determined by users, and transaction fees initiated by different users will show obvious differences. Therefore, by finding out the withdrawal transaction data and deposit transaction data with the same transaction fee, we can find the transactions involving mixed resource services that are likely to be initiated by the same user and may be related.

[0204] Based on the above embodiment, by using the resource access transaction list involving the hybrid resource service, it is possible to accurately find the target transaction combination that may have an implicit association relationship from the dimension of the transaction fee involving the hybrid resource service.

[0205] In some embodiments, when the preset detection rule set includes: multiple transaction matching association rules, the above processing of the resource access transaction list involving the hybrid resource service, the reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service according to the preset detection rule set to determine the target transaction combination that meets the preset requirements may include:

[0206] S1: According to the resource access transaction list involving the hybrid resource service, the total amount of resources deposited into the hybrid resource pool by each deposit address is counted; at the same time, the total amount of resources taken out of the hybrid resource pool by each withdrawal address is counted;

[0207] S2: Determine the deposit address and withdrawal address whose difference between the total amount of deposited resources and the total amount of withdrawn resources is less than or equal to a preset difference threshold, as the matching deposit address and withdrawal address;

[0208] S3: Query the resource access transaction list involving the hybrid resource service, and obtain the deposit transaction data and withdrawal transaction data associated with the matching deposit address and withdrawal address as the target transaction combination.

[0209] The deposit transaction data in a target transaction combination may include one deposit transaction data or multiple deposit transaction data. Similarly, the withdrawal transaction data in a target transaction combination may include one withdrawal transaction data or multiple withdrawal transaction data.

[0210] This is because in some cases, for the same resource involving hybrid resource services, when the resource is deposited into the hybrid resource pool, it may be deposited multiple times; when the resource is taken out of the hybrid resource pool, it may be taken out multiple times. But the total amount of resources is always the same. Therefore, it is possible to consider mining transaction data involving hybrid resource services that may have associated relationships based on the dimension of the total amount of resources.

[0211] Based on the above embodiment, by using the resource access transaction list involving the hybrid resource service, it is possible to accurately find target transaction combinations that may have implicit association relationships from the dimension of the total amount of resources involved in multiple transactions involving the hybrid resource service.

[0212] As can be seen from the above, the method for determining associated transactions based on hybrid resource services provided in the embodiments of this specification can first obtain a list of resource access transactions involving hybrid resource services, and anonymous reward resource issuance records involving hybrid resource services; and obtain a list of related resource transactions not involving hybrid resource services based on the deposit address and withdrawal address involving hybrid resource services; and then determine the associated transactions according to the preset detection rule set by processing the list of resource access transactions involving hybrid resource services, the reward resource issuance records involving hybrid resource services, and the list of related resource transactions not involving hybrid resource services; wherein the preset detection rule set includes at least: related resource transaction association rules, anonymous reward association rules. Thus, it is possible to track and determine the associated transactions based on blockchain hybrid resource services more efficiently and accurately. Then, according to the above-mentioned associated transactions, a corresponding transaction resource link diagram can be constructed; and according to the transaction resource link diagram, the related transactions based on blockchain hybrid resource services can be effectively monitored and tracked, and risk accounts involving transaction risks can be accurately detected and identified to protect transaction data security.

[0213] This specification embodiment provides a server, referring to Figure 7 The server includes a network communication port 701, a processor 702 and a memory 703, and the above structures are connected through internal cables so that each structure can perform specific data interaction.

[0214] The network communication port 701 may be used to receive a search instruction for associated transactions;

[0215] The processor 702 can be specifically used to respond to the search instruction of the associated transaction, obtain the resource access transaction list involving the hybrid resource service, and the anonymous reward resource issuance record involving the hybrid resource service; wherein the resource access transaction list involving the hybrid resource service at least includes the deposit address and the withdrawal address involving the hybrid resource service; according to the deposit address and the withdrawal address involving the hybrid resource service, obtain the related resource transaction list not involving the hybrid resource service; according to the preset detection rule set, process the resource access transaction list involving the hybrid resource service, the reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service, and determine the target transaction combination that meets the preset requirements; wherein the preset detection rule set at least includes: related resource transaction association rules, anonymous reward association rules; according to the target transaction combination, determine the associated transactions.

[0216] The memory 703 can be specifically used to store corresponding instruction programs, as well as resource access transaction lists involving hybrid resource services, anonymous reward resource issuance records involving hybrid resource services, and related resource transaction lists not involving hybrid resource services and other related data.

[0217] Based on the above method, the relevant structural performance of the server can be effectively utilized, the data processing speed of the electronic device can be improved, and the relevant data processing of the determination of the associated transactions based on the hybrid resource service can be efficiently realized.

[0218] In this embodiment, the network communication port 701 can be a virtual port that is bound to different communication protocols so that different data can be sent or received. For example, the network communication port can be a port responsible for web data communication, a port responsible for FTP data communication, or a port responsible for email data communication. In addition, the network communication port can also be a physical communication interface or communication chip. For example, it can be a wireless mobile network communication chip, such as GSM, CDMA, etc.; it can also be a Wifi chip; it can also be a Bluetooth chip.

[0219] In this embodiment, the processor 702 may be implemented in any appropriate manner. For example, the processor may take the form of a microprocessor or processor and a computer-readable medium storing a computer-readable program code (such as software or firmware) executable by the (micro)processor, a logic gate, a switch, an application specific integrated circuit (ASIC), a programmable logic controller, and an embedded microcontroller, etc. This specification does not limit this.

[0220] In this embodiment, the memory 703 may include multiple levels. In a digital system, anything that can store binary data can be a memory; in an integrated circuit, a circuit with a storage function that has no physical form is also called a memory, such as RAM, FIFO, etc.; in a system, a storage device with a physical form is also called a memory, such as a memory stick, TF card, etc.

[0221] The embodiments of the present specification also provide a computer-readable storage medium based on the above-mentioned method for determining related transactions based on hybrid resource services, wherein the computer-readable storage medium stores computer program instructions, and when the computer program instructions are executed, the following steps are implemented: obtaining a resource access transaction list involving hybrid resource services, and an anonymous reward resource issuance record involving hybrid resource services; wherein the resource access transaction list involving hybrid resource services at least includes a deposit address and a withdrawal address involving hybrid resource services; according to the deposit address and the withdrawal address involving hybrid resource services, obtaining a related resource transaction list not involving hybrid resource services; according to a preset detection rule set, processing the resource access transaction list involving hybrid resource services, the reward resource issuance record involving hybrid resource services, and the related resource transaction list not involving hybrid resource services, and determining a target transaction combination that meets preset requirements; wherein the preset detection rule set at least includes: related resource transaction association rules, anonymous reward association rules; according to the target transaction combination, determining associated transactions.

[0222] In this embodiment, the storage medium includes, but is not limited to, a random access memory (RAM), a read-only memory (ROM), a cache, a hard disk (HDD), or a memory card. The memory may be used to store computer program instructions. The network communication unit may be an interface for network connection communication set in accordance with the standard specified by the communication protocol.

[0223] In this embodiment, the functions and effects specifically implemented by the program instructions stored in the computer-readable storage medium can be explained in comparison with other implementations and will not be described in detail here.

[0224] The embodiments of the present specification also provide a computer program product, which at least includes a computer program, and when the computer program is executed by a processor, the following method steps are implemented: obtaining a resource access transaction list involving a hybrid resource service, and an anonymous reward resource issuance record involving a hybrid resource service; wherein the resource access transaction list involving the hybrid resource service at least includes a deposit address and a withdrawal address involving the hybrid resource service; according to the deposit address and the withdrawal address involving the hybrid resource service, obtaining a related resource transaction list not involving the hybrid resource service; according to a preset detection rule set, processing the resource access transaction list involving the hybrid resource service, the reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service, and determining a target transaction combination that meets the preset requirements; wherein the preset detection rule set at least includes: a related resource transaction association rule, an anonymous reward association rule; according to the target transaction combination, determining associated transactions.

[0225] See also Figure 8 As shown, the embodiment of this specification also provides a device for determining associated transactions based on hybrid resource services, which may specifically include the following structural modules:

[0226] The first acquisition module 801 may be specifically used to acquire a resource access transaction list involving a hybrid resource service and an anonymous reward resource issuance record involving a hybrid resource service; wherein the resource access transaction list involving a hybrid resource service at least includes a deposit address and a withdrawal address involving a hybrid resource service;

[0227] The second acquisition module 802 may be specifically used to acquire a list of related resource transactions not involving the hybrid resource service according to a deposit address and a withdrawal address involving the hybrid resource service;

[0228] The processing module 803 may be specifically used to process the resource access transaction list involving the hybrid resource service, the reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service according to the preset detection rule set, and determine the target transaction combination that meets the preset requirements; wherein the preset detection rule set at least includes: related resource transaction association rules and anonymous reward association rules;

[0229] The determination module 804 may be specifically configured to determine associated transactions according to the target transaction combination.

[0230] In some embodiments, the preset detection rule set may also specifically include: address reuse association rules, transaction fee association rules, multi-transaction matching association rules, etc.

[0231] In some embodiments, when the above-mentioned first acquisition module 801 is implemented, a resource access transaction list involving hybrid resource services can be obtained in the following manner: obtain the contract address of the hybrid resource pool; collect transaction data involving hybrid resource services based on the contract address of the hybrid resource pool; divide the transaction data into deposit transaction data and withdrawal transaction data based on the function type of the transaction function triggered by the transaction data; wherein the function type includes a withdrawal transaction function and a deposit transaction function; according to the preset feature processing rules, process the deposit transaction data and the withdrawal transaction data respectively, obtain and utilize the corresponding transaction features, and establish a resource access transaction list involving hybrid resource services.

[0232] In some embodiments, in a resource access transaction list involving a hybrid resource service, transaction characteristics of retrieval transaction data include at least: a retrieval address, and transaction characteristics of deposit transaction data include at least: a deposit address;

[0233] Accordingly, when the above-mentioned first processing module 801 is implemented, it can process the deposited transaction data and the retrieved transaction data respectively according to the preset feature processing rules in the following manner to obtain corresponding transaction features: according to the preset feature processing rules, retrieve the deposited transaction data and determine the first key field; and extract the fields in the adjacent range after the first key field as the deposit address; according to the preset feature processing rules, intercept a specified data segment from the retrieved transaction data; retrieve the specified data segment and determine the second key field; and extract the fields in the adjacent range after the second key field as the retrieve address.

[0234] In some embodiments, when the above-mentioned first acquisition module 801 is implemented, the anonymous reward resource issuance record involving the hybrid resource service can be obtained in the following manner: by crawling the transaction data that triggers the withdrawal transaction function in the anonymous reward contract regarding the hybrid resource service, the reward transaction data is obtained; a specified data segment is located in the reward transaction data; and the first type of reward data is determined in the specified data segment and extracted based on the third key field; the reward receiving address regarding the second type of reward data is determined in the reward transaction data and extracted based on the fourth key field; wherein the user terminal converts the first type of reward data into the second type of reward data based on the anonymous reward contract, and receives the corresponding second type of reward data through the reward receiving address; based on the first type of reward data and the reward receiving address, an anonymous reward resource issuance record involving the hybrid resource service is established.

[0235] In some embodiments, when the above-mentioned second acquisition module 802 is implemented, it can obtain a list of related resource transactions not involving hybrid resource services based on the deposit address and withdrawal address involving hybrid resource services in the following manner: call a preset program tool, query the blockchain, and obtain transaction data involving the transfer of resources other than hybrid resources that occurred before the transaction data involving hybrid resource services as initial transaction data; retrieve the initial transaction data, determine and extract the relevant address of the initial transaction data based on the first key field and the fifth key field; and detect whether the relevant address matches the deposit address or withdrawal address involving the hybrid resource service; when it is determined that the relevant address of the initial transaction data matches the deposit address or withdrawal address involving the hybrid resource service, determine the initial transaction data as relevant transaction data; and construct a list of related resource transactions not involving hybrid resource services based on the relevant transaction data.

[0236] In some embodiments, when the preset detection rule set includes: anonymous reward association rules, when the above-mentioned processing module 803 is specifically implemented, the resource access transaction list involving the hybrid resource service, the reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service can be processed according to the preset detection rule set in the following manner to determine the target transaction combination that meets the preset requirements: according to the anonymous reward resource issuance record of the hybrid resource service, the corresponding first-category reward data and reward receiving address are obtained; according to the resource access transaction list involving the hybrid resource service, whether the reward receiving address belongs to the withdrawal address of the hybrid resource pool is detected; in the case of determining that the reward address belongs to the withdrawal address of the hybrid resource pool, the withdrawal transaction data involving the hybrid resource service based on the withdrawal address is determined; and by querying the blockchain, the block number of the first-category reward data and the block number of the withdrawal transaction data are obtained; according to the block number of the first-category reward data and the block number of the withdrawal transaction data, the block number of the potential transaction data that meets the preset numerical relationship is determined; according to the block number of the potential transaction data, by querying the blockchain, it is determined whether there is potential transaction data that meets the requirements; in the case of determining that the potential transaction data exists, the withdrawal transaction data and the potential transaction data are determined as the target transaction combination.

[0237] In some embodiments, when the preset detection rule set includes: related resource transaction association rules, when the above-mentioned processing module 803 is specifically implemented, it can process the resource access transaction list involving hybrid resource services, the reward resource issuance record involving hybrid resource services, and the related resource transaction list not involving hybrid resource services according to the preset detection rule set in the following manner to determine the target transaction combination that meets the preset requirements: according to the related resource transaction list not involving hybrid resource services, detect whether there is a transaction of interest in the related transactions whose transaction initiation address belongs to the contract address of the hybrid resource pool and whose transaction receiving address belongs to the contract address of the hybrid resource pool; when the transaction of interest is detected, obtain the transaction receiving address of the transaction of interest; and detect whether the transaction receiving address of the transaction of interest belongs to the preset service class address; when it is determined that the transaction receiving address of the transaction of interest does not belong to the preset service class address, obtain the transaction initiation address of the transaction of interest; query the resource access transaction list involving hybrid resource services, and determine the transaction data related to the initiation address of the transaction of interest and the receiving address of the transaction of interest as the target transaction combination.

[0238] In some embodiments, after the associated transactions are determined according to the target transaction combination, the device, when implemented, can also be used to: construct a transaction resource chain diagram according to the associated transactions; detect whether there is a transaction risk according to the transaction resource chain diagram; and when it is determined that there is a transaction risk, determine the risk account with the transaction risk according to the transaction resource chain diagram.

[0239] It should be noted that the units, devices or modules described in the above embodiments can be implemented by computer chips or entities, or by products with certain functions. For the convenience of description, the above devices are described separately by functions divided into various modules. Of course, when implementing this specification, the functions of each module can be implemented in the same or more software and / or hardware, or the modules that implement the same function can be implemented by a combination of multiple sub-modules or sub-units. The device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0240] As can be seen from the above, the device for determining associated transactions based on hybrid resource services provided by the embodiments of this specification can track and determine associated transactions based on blockchain hybrid resource services more efficiently and accurately. Subsequently, a corresponding transaction resource link diagram can be constructed based on the above associated transactions; and based on the transaction resource link diagram, relevant transactions based on blockchain hybrid resource services can be effectively monitored and tracked, and risk accounts involving transaction risks can be accurately detected and identified to protect transaction data security.

[0241] In a specific scenario example, the method for determining associated transactions based on hybrid resource services provided in this specification can be applied to implement hybrid resource transaction tracking based on heuristic rules (eg, association rules). The specific implementation process can be found in the following content.

[0242] In this scenario example, the purpose of transaction tracking is to link two transactions and then form a complete capital chain step by step. Therefore, the transaction tracking involving mixed resources (for example, mixed coins) should achieve the association of mixed resource deposit and withdrawal transactions (for example, withdrawal transactions, deposit transactions).

[0243] However, existing methods often have the following problems when implemented: 1) Existing hybrid resource tracking methods complete the association or clustering of deposit and withdrawal addresses, while an address may have multiple deposit or withdrawal transactions, which still leaves a large search space and uncertainty for transaction tracking that aims to associate two transactions. 2) There are incorrect heuristics based on existing heuristic rules. For example, an existing heuristic rule: if there is an address A that deposits 1ETH into the hybrid resource pool, and after a period of time, address A withdraws money to another address B as the caller of the contract, then it is determined that there is an association between address A and address B. In Tornado Cash (a hybrid resource service), in order to further improve anonymity, the contract caller when withdrawing money is generally a relayer, and there is basically no association between the relayer and the actual depositor. At the same time, as an external account, the relayer can also initiate deposit transactions. Therefore, this heuristic rule is not suitable for Tornado Cash, but instead introduces a large number of irrelevant associations. 3) Some existing heuristic rules for associating two transactions also include similar transaction amounts, which are not applicable to the current hybrid resource platform on the EVM-compatible chain, because the current hybrid resource platform provides a fixed amount of hybrid resource pool (such as 0.1ETH, 1ETH, 10ETH, etc.) in order to further improve anonymity.

[0244] In view of the above problems existing in the existing methods, the applicant proposes an improved hybrid resource transaction tracking method based on heuristic rules. Fig. 9 shown.

[0245] The method as a whole can be divided into two modules, a data collection module and a parsing module.

[0246] 1. Heuristic rule module:

[0247] (1) Address reuse (e.g., address reuse association rule): Assume that the address that makes a deposit transaction to the Tornado Cash pool is the same as the address that receives a withdrawal. In this case, the two transactions can be linked together.

[0248] (2) Unique gas price (e.g., transaction fee association rule): A transaction fee is charged for initiating a transaction on the blockchain, and this fee is determined by the gas consumed by the transaction and the current gas price. The gas price is mainly affected by factors such as market supply and demand, network congestion, and the fees that users are willing to pay. Generally, if users use some market tools and websites to initiate transactions, these tools will give a recommended gas price based on the real-time network status to help users better set transaction fees. Therefore, this value is generally more random, so when Ethereum users specify a gas price when depositing or withdrawing funds from the Tornado Cash pool, and those who do so tend to specify the same gas price for deposit and withdrawal transactions. In this case, the two transactions can be linked together.

[0249] (3) Resource association (e.g., related resource transaction association rules): If the deposit address has a resource transaction with the withdrawal address before initiating a mixed resource deposit, and the withdrawal address is obviously not a service, then the two addresses are considered to belong to the same entity. In this case, the mixed resource transactions of the deposit address and the withdrawal address can be matched.

[0250] (4) Multi-denomination association (e.g., multi-transaction matching association rules): Assume that an address continuously deposits funds of the same denomination, and eventually another address withdraws funds of the same amount, and during the mixing process, no other wallet address mixes resources of the same denomination. In this case, the deposit and withdrawal addresses can be easily linked.

[0251] (5) Anonymity mining association (e.g., anonymity reward association rules): For example, starting from December 2020 to December 2021, Tornado Cash introduced anonymous mining. This is an incentive program designed to encourage more deposits into TornadoCash pools, thereby increasing their anonymity sets. Tornado Cash rewards participants with a fixed number of anonymity points (Anonymity Points, AP) (e.g., first category reward data) based on how long they keep their assets in the pool. The correspondence between the time of depositing funds in different Tornado Cash Ethereum hybrid resource pools and the AP obtained is shown in Table 1.

[0252] When users withdraw funds, they can claim these APs, and the amount of APs withdrawn will be recorded in the transaction. Then, APs can be exchanged for TORN (for example, the second type of reward data) through the automated market maker (AMM) within Tornado Cash.

[0253] So this will be done in steps: AP is requested for the notes that have been used up. The amount of AP obtained depends on how many blocks the note has passed in the Tornado Cash pool, and the pool it is in. Using Tornado Cash's AMM, users can exchange AP for TORN. From this, two important information can be obtained: the amount of AP exchanged for TORN; the address recipient that received TORN (for example, the reward receiving address).

[0254] Assuming that users are exchanging their total AP, deposit and withdrawal transactions can be linked using the following process: Check if the recipient address has made a deposit or withdrawal in Tornado Cash; if the address is included in the deposit (withdrawal) address set, then check all deposits (withdrawals) of the address; convert AP to block numbers, and then find the block where the potential withdrawal (deposit) is located according to deposit_blocks + AP_converted_blocks = withdraw_blocks (preset numerical relationship). When such a withdrawal (deposit) is found, the two transactions are considered to be linked.

[0255] 2. Data collection and analysis module:

[0256] In order to associate the deposit and withdrawal transactions of hybrid resources, first of all, it is necessary to collect the deposit and withdrawal transactions of each hybrid resource pool and parse them. Specifically:

[0257] Collect the contract addresses of all Tornado Cash hybrid resource pools; for each contract address, crawl all related transactions, and divide them into deposit transactions (e.g., depositing transaction data) (triggering function deposit) and withdrawal transactions (e.g., withdrawing transaction data) (triggering function withdraw) according to the function triggered by the transaction.

[0258] For deposit transactions, the deposit address is the from of the transaction; for withdrawal transactions, due to the existence of repeaters, the address receiving the withdrawal is generally not the from of the withdrawal transaction, but the _recipient address in the Input Data.

[0259] The final output is the deposit transaction list deposit_txs and the withdrawal transaction list withdraw_txs (for example, a resource deposit and withdrawal transaction list involving a hybrid resource service). The fields contained in the deposit transaction list deposit_txs can be specifically expressed as: {transaction_hash, from_address, to_address, gas_price, block_number, pool_address}.

[0260] Similarly, the fields contained in the above withdrawal transaction list withdraw_txs can be specifically expressed in the following form: {transaction_hash,from_address,to_address,gas_price,block_number,pool_address,recipient_address}.

[0261] Among them, transaction_hash represents the hash of the transaction, which uniquely identifies the transaction, from_address represents the initiator of the transaction, and in deposit_txs it represents the deposit address, to_address represents the recipient of the transaction, gas_price represents the gas price, block_number represents the block number, pool_address represents the hybrid resource pool address (there are multiple hybrid resource pools in Tornado Cash, such as 0.1ETH, 1ETH, etc. Each hybrid resource pool is essentially a smart contract, so pool_address represents the contract address), and recipient_address only exists in withdraw_txs, indicating the account address receiving the withdrawal.

[0262] Secondly, in order to complete the resource association heuristic, the deposit and withdrawal addresses need to interact outside the mixed resource pool, that is, to find out the transactions between the deposit and withdrawal addresses, including the interaction of native resources (ie ETH), ERC-20 resources and ERC-721 resources. Specifically:

[0263] BlockchainSpider can be used to crawl the first 10,000 resource transfer records of all deposit and withdrawal addresses;

[0264] For all these transactions, determine whether from exists in the deposit (withdrawal) address and whether to exists in the withdrawal (deposit) address. If so, record the transaction, indicating that there is a connection between the two addresses.

[0265] The fields contained in the final output deposit and withdrawal address resource-related transaction records (for example, a list of related resource transactions not involving mixed resource services) are {hash, from, to, value, timeStamp, blockNumber, gasPrice}.

[0266] Among them, hash represents the transaction hash, from represents the transaction initiator, to represents the transaction recipient, value represents the native resource amount of the transaction, timeStamp represents the timestamp of the transaction initiation, blockNumber represents the block number of the transaction, and gasPrice represents the gas price of the transaction.

[0267] Finally, in order to complete the anonymous mining heuristic, it is also necessary to crawl the transaction that triggers the withdraw function in the anonymous mining contract (for example, the anonymous reward contract) 0x746Aebc06D2aE31B71ac51429A19D54E797878E9, and obtain the value of _args.amount from InputData, which is the AP mentioned in the anonymous mining heuristic rule, and the address that actually receives the TORN resources from _args.extData, that is, the recipient mentioned in anonymous mining. The fields contained in the final output transaction list (for example, the anonymous reward resource issuance record involving the hybrid resource service) can specifically include the following forms: {transaction_hash, from_address, to_address, block_number, anonimity_points, recipient_address}.

[0268] Among them, transaction_hash represents the transaction hash, from_address represents the transaction initiator, to_address represents the transaction recipient, block_number represents the block number of the transaction, anonimity_points represents the points obtained in anonymous mining, and recipient_address represents the address that receives TORN.

[0269] Ultimately, by using the collected and parsed data and combining it with heuristic rules, we can generate related mixed deposit and withdrawal transactions. By further combining transactions associated with deposits and withdrawals, we can form a complete capital chain and achieve on-chain capital tracking.

[0270] Through the above scenario examples, the method for determining related transactions based on hybrid resource services provided in this specification is verified. 1) The BlockchainSpider tool can be used to crawl and parse various required data, including deposit and withdrawal transactions, resource-related transactions between deposit and withdrawal addresses, and withdrawal transactions of anonymous mining contracts, to support the tracking of hybrid resource transactions; 2) Resource-related transactions include native resources, ERC-20 resources, and ERC-721 resources, covering the association relationship between deposit and withdrawal addresses as much as possible; 3) The heuristic rules basically cover the links of mining potential deposit and withdrawal transactions, and can obtain better tracking effects.

[0271] Although the present specification provides method operation steps as described in the embodiments or flow charts, more or less operation steps may be included based on conventional or non-creative means. The order of steps listed in the embodiments is only one way of executing the order of many steps, and does not represent a unique execution order. When the device or client product in practice is executed, it can be executed in sequence or in parallel according to the method shown in the embodiments or the drawings (for example, a parallel processor or a multi-threaded processing environment, or even a distributed data processing environment). The term "include", "include" or any other variant thereof is intended to cover non-exclusive inclusion, so that the process, method, product or device including a series of elements includes not only those elements, but also includes other elements that are not explicitly listed, or also includes elements inherent to such a process, method, product or device. In the absence of more restrictions, it is not excluded that there are other identical or equivalent elements in the process, method, product or device including the elements. The first, second, etc. words are used to represent the name, and do not represent any particular order.

[0272] Those skilled in the art also know that, in addition to implementing the controller in a purely computer-readable program code, the controller can be made to implement the same function in the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers by logically programming the method steps. Therefore, such a controller can be considered as a hardware component, and the devices for implementing various functions included therein can also be considered as structures within the hardware component. Or even, the devices for implementing various functions can be considered as both software modules for implementing the method and structures within the hardware component.

[0273] This specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, classes, etc. that perform specific tasks or implement specific abstract data types. This specification may also be practiced in distributed computing environments where tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules may be located in local and remote computer-readable storage media including storage devices.

[0274] Through the description of the above embodiments, it can be known that those skilled in the art can clearly understand that the present specification can be implemented by means of software plus a necessary general hardware platform. Based on such an understanding, the technical solution of the present specification can essentially be embodied in the form of a software product, which can be stored in a storage medium such as ROM / RAM, a disk, an optical disk, etc., and includes a number of instructions for enabling a computer device (which can be a personal computer, a mobile terminal, a server, or a network device, etc.) to execute the methods described in each embodiment of the present specification or some parts of the embodiments.

[0275] The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. This specification can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld devices or portable devices, tablet devices, multi-processor systems, microprocessor-based systems, set-top boxes, programmable electronic devices, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc.

[0276] Although the present specification is described through embodiments, those skilled in the art will appreciate that there are many modifications and changes to the present specification without departing from the spirit of the present specification, and it is intended that the appended claims include these modifications and changes without departing from the spirit of the present specification.

Claims

1. A method for determining associated transactions based on hybrid resource services, characterized in that: include: Obtaining a resource access transaction list involving a hybrid resource service and an anonymous reward resource issuance record involving a hybrid resource service; wherein the resource access transaction list involving a hybrid resource service at least includes a deposit address and a withdrawal address involving a hybrid resource service; According to the deposit address and withdrawal address involving the hybrid resource service, obtain the relevant resource transaction list not involving the hybrid resource service; According to a preset detection rule set, a resource access transaction list involving a hybrid resource service, a reward resource issuance record involving a hybrid resource service, and a related resource transaction list not involving a hybrid resource service are processed to determine a target transaction combination that meets preset requirements; wherein the preset detection rule set includes at least: a related resource transaction association rule and an anonymous reward association rule; According to the target transaction combination, associated transactions are determined.

2. The method according to claim 1, characterized in that The preset detection rule set also includes: address reuse association rules, transaction fee association rules, and multi-transaction matching association rules.

3. The method according to claim 2, characterized in that Get a list of resource access transactions involving hybrid resource services, including: Get the contract address of the hybrid resource pool; According to the contract address of the hybrid resource pool, collect transaction data involving hybrid resource services; According to the function type of the transaction function triggered by the transaction data, the transaction data is divided into deposit transaction data and withdrawal transaction data; wherein the function type includes a withdrawal transaction function and a deposit transaction function; According to the preset feature processing rules, the deposit transaction data and the retrieval transaction data are processed respectively, the corresponding transaction features are obtained and used, and a resource access transaction list involving the hybrid resource service is established.

4. The method according to claim 3, characterized in that In the resource access transaction list involving the hybrid resource service, the transaction characteristics of the retrieval transaction data at least include: the retrieval address, and the transaction characteristics of the deposit transaction data at least include: the deposit address; Accordingly, according to the preset feature processing rules, the deposit transaction data and the retrieval transaction data are processed respectively to obtain corresponding transaction features, including: According to the preset feature processing rules, the stored transaction data is retrieved to determine the first key field; and the fields in the adjacent range after the first key field are extracted as the storage address; According to the preset feature processing rules, a specified data segment is intercepted from the retrieved transaction data; the specified data segment is retrieved to determine the second key field; and the fields in the adjacent range after the second key field are extracted as the retrieval address.

5. The method according to claim 2, characterized in that: Obtain anonymous reward resource issuance records involving mixed resource services, including: Get the reward transaction data by crawling the transaction data of the withdrawal transaction function triggered in the anonymous reward contract of the hybrid resource service; Locate a designated data segment in the reward transaction data; and determine and extract the first type of reward data in the designated data segment based on a third key field; Determine in the reward transaction data and extract the reward receiving address of the second type of reward data according to the fourth key field; wherein the user terminal converts the first type of reward data into the second type of reward data based on the anonymous reward contract, and receives the corresponding second type of reward data through the reward receiving address; Based on the first category of reward data and reward receiving addresses, an anonymous reward resource distribution record involving mixed resource services is established.

6. The method according to claim 2, characterized in that According to the deposit address and withdrawal address involving the hybrid resource service, obtain the relevant resource transaction list not involving the hybrid resource service, including: Calling a preset program tool to query the blockchain and obtain transaction data involving the transfer of other resources other than the hybrid resources that occurred before the transaction data involving the hybrid resource service as the initial transaction data; Retrieving the initial transaction data, determining and extracting the relevant address of the initial transaction data based on the first key field and the fifth key field; and detecting whether the relevant address matches the deposit address or withdrawal address involved in the hybrid resource service; In the case where it is determined that the relevant address of the initial transaction data matches the deposit address or withdrawal address involving the hybrid resource service, the initial transaction data is determined as the relevant transaction data; Based on the relevant transaction data, a list of relevant resource transactions that do not involve mixed resource services is constructed.

7. The method according to claim 5, characterized in that In the case where the preset detection rule set includes: anonymous reward association rules, according to the preset detection rule set, the resource access transaction list involving the hybrid resource service, the reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service are processed to determine the target transaction combination that meets the preset requirements, including: According to the anonymous reward resource distribution record of the hybrid resource service, obtain the corresponding first-category reward data and reward receiving address; According to the resource access transaction list involving the hybrid resource service, check whether the reward receiving address belongs to the withdrawal address of the hybrid resource pool; When it is determined that the reward address belongs to the withdrawal address of the hybrid resource pool, the withdrawal transaction data involving the hybrid resource service based on the withdrawal address is determined; and the block number of the first type of reward data and the block number of the withdrawal transaction data are obtained by querying the blockchain; According to the block number of the first type of reward data and the block number of the retrieved transaction data, the block number of the potential transaction data satisfying the preset numerical relationship is determined; According to the block number of the potential transaction data, by querying the blockchain, determine whether there is potential transaction data that meets the requirements; When it is determined that the potential transaction data exists, the transaction data and the potential transaction data are retrieved and determined as a target transaction combination.

8. The method according to claim 6, characterized in that In the case where the preset detection rule set includes: related resource transaction association rules, according to the preset detection rule set, the resource access transaction list involving the hybrid resource service, the reward resource issuance record involving the hybrid resource service, and the related resource transaction list not involving the hybrid resource service are processed to determine the target transaction combination that meets the preset requirements, including: According to the list of related resource transactions that do not involve hybrid resource services, check whether there are any transactions in the related transactions where the transaction initiation address belongs to the contract address of the hybrid resource pool and the transaction receiving address belongs to the contract address of the hybrid resource pool; When a transaction of interest is detected, a transaction receiving address of the transaction of interest is obtained; and whether the transaction receiving address of the transaction of interest belongs to a preset service class address; In the case where it is determined that the transaction receiving address of the transaction of interest does not belong to the preset service class address, obtaining the transaction initiating address of the transaction of interest; A resource access transaction list involving the hybrid resource service is queried, and transaction data related to the initiating address of the transaction of interest and the receiving address of the transaction of interest are determined as the target transaction combination.

9. The method according to claim 1, characterized in that: After determining the associated transactions according to the target transaction combination, the method further includes: Build a transaction resource link graph based on related transactions; Detect whether there is transaction risk based on the transaction resource link diagram; When it is determined that there is a transaction risk, the risk account with the transaction risk is determined based on the transaction resource link diagram.

10. A device for determining associated transactions based on hybrid resource services, characterized in that: include: A first acquisition module is used to acquire a resource access transaction list involving a hybrid resource service and an anonymous reward resource issuance record involving a hybrid resource service; wherein the resource access transaction list involving a hybrid resource service at least includes a deposit address and a withdrawal address involving a hybrid resource service; The second acquisition module is used to acquire a list of related resource transactions not involving the hybrid resource service according to the deposit address and withdrawal address involving the hybrid resource service; A processing module, for processing a resource access transaction list involving a hybrid resource service, a reward resource issuance record involving a hybrid resource service, and a related resource transaction list not involving a hybrid resource service according to a preset detection rule set, and determining a target transaction combination that meets preset requirements; wherein the preset detection rule set includes at least: a related resource transaction association rule and an anonymous reward association rule; The determination module is used to determine the associated transactions according to the target transaction combination.