Bank data security management method, system and device and storage medium

Abstract

The invention relates to a bank data security management method, system and device and a storage medium, and belongs to the technical field of data management, and the method comprises the steps: generating a transaction record every time a transaction occurs; regularly screening out transaction objects meeting a preset memory condition from the transaction record, generating actual information for the screened transaction objects, and storing the actual information into a preset memory group; when a historical transaction object query request of a user is received, identity verification is carried out on the user, and if verification is passed, encryption processing is carried out on actual information of transaction objects related to the user in the memory group, and then encrypted information is obtained and displayed; and receiving a convenient transaction instruction, determining a transaction object corresponding to the encrypted information based on the encrypted information in the convenient transaction instruction and the corresponding relationship between the encrypted information and the actual information, and executing a transaction operation between the user and the determined transaction object. The method and the device have the effect of improving the security management strength of the bank data.

Description

Technical Field

[0001] The present application relates to the field of data management technology, and in particular to a bank data security management method, system, device and storage medium. Background Art

[0002] The bank's data mainly comes from user identity information and user transaction data accumulated during the bank's own business operations. Different bank data has different information values, which are crucial to the property security of banks and users. Therefore, it is very necessary to strengthen the security management of bank data.

[0003] At present, when users use online banking apps to conduct transactions, such as transferring money to other bank accounts, after the transfer is completed, the existing banking system generally generates a transaction record. In order to facilitate the next transaction, the banking system will even save the identity information of the transaction object corresponding to the transaction record generated by the user in the historical period, and display all the transaction objects when the user logs in to the corresponding account each time. The identity information generally includes the bank account number and user name of the transaction object.

[0004] Although the above method can provide convenience for users to conduct subsequent transactions, it also invisibly buries security risks. For example, when the current account B of user A is stolen by illegal elements for login, combined with the above functions, it can be known that the illegal elements can obtain the identity information of the historical transaction objects of the current account B, which can easily lead to the leakage or even theft of the identity information of the transaction objects. More seriously: if the aforementioned transaction object contains an account C corresponding to the identity information with the same user name as the current account B, then account C is very likely to be another bank account held by user A in addition to the current account B, and because general users are accustomed to using the same login password for all bank accounts held in their names, then in this case, account C is also easily implicated and stolen by illegal elements, which in turn causes the loss of user A's property. Summary of the invention

[0005] In order to improve the security management of bank data, the present application provides a bank data security management method, system, device and storage medium.

[0006] In the first aspect, the present application provides a bank data security management method, which adopts the following technical solution: Whenever a transaction occurs, a transaction record is generated; wherein the transaction record includes at least the identity information and account information of the transaction object; Periodically screening out transaction objects that meet preset memory conditions from transaction records, generating actual information for the screened transaction objects, and storing the actual information in a preset memory group; wherein the actual information at least includes identity information and account information of the transaction objects; Whenever a user's historical transaction object query request is received, the user's identity is authenticated. If the authentication is successful, the actual information of the transaction object related to the user in the memory group is encrypted to obtain encrypted information, and then the encrypted information is displayed; wherein the encrypted information at least includes discrimination information that can be used by the user to distinguish different transaction objects; Receive a convenient transaction instruction triggered by a user, determine the transaction object corresponding to the encrypted information based on the encrypted information in the convenient transaction instruction and the correspondence between the encrypted information and the actual information, and execute the transaction operation between the user and the determined transaction object.

[0007] By adopting the above technical solution, when the user needs to trade again with the transaction object that has been traded in the historical period, a historical transaction object query request can be triggered. At this time, the present application proposes to authenticate the user who triggered the request to ensure that the request is triggered by the user himself. Only after the verification is passed, the corresponding historical transaction object information will be displayed, and before displaying, the present application proposes to encrypt the information of the historical transaction object (that is, the actual information mentioned above) and generate encrypted information. That is, even if the request is made by the user himself, in order to protect the information of the transaction object from being leaked, the present application will use encrypted information instead of actual information for display, and the encrypted information contains discrimination information. The discrimination information can be considered to allow the user to identify the information of the corresponding transaction object based on the encrypted information. When the user needs to trade with the displayed transaction object again, he can touch the encrypted information of the corresponding transaction object to trigger the convenient transaction instruction. The present application will determine the transaction object that the current user wants to trade based on the correspondence between the encrypted information and the actual information, and finally execute the transaction operation. In summary, the above process can not only provide convenience for users to conduct frequent transactions with historical transaction objects, but also ensure that the privacy of transaction objects is not leaked while providing convenience, thereby optimizing the security management of bank data.

[0008] Optionally, the performing identity authentication on the user, if the authentication is successful, encrypting the actual information of the transaction object related to the user in the memory group to obtain encrypted information, and then displaying the encrypted information, includes: Performing identity verification on the user and obtaining verification information; wherein the verification information at least includes the transaction intention input by the user; The transaction intention is compared with the preset discrimination tags corresponding to each transaction object in the current memory group. If there is a first discrimination tag consistent with the transaction intention, it is considered that the verification is passed; If the verification is successful, the actual information of the transaction object corresponding to the first identification tag is encrypted to obtain encrypted information, and then the encrypted information is displayed, wherein the encrypted information contains identification information, and the identification information is the transaction intention; The method further comprises: Periodically determine whether there is a regular transaction object among all transaction objects in the memory group, and if so, update the corresponding discrimination tag for the regular transaction object based on the transaction habits of the regular transaction object; wherein the regular transaction object is a transaction object whose corresponding transaction record meets the preset regular condition; Regularly update and generate corresponding discriminant labels for other transaction objects in the memory group except regular transaction objects.

[0009] By adopting the above technical solution, the solution proposes to regularly update and generate a discrimination label for each transaction object in the memory group, wherein the discrimination label is information used to distinguish it from other transaction objects in the memory group. In the subsequent display process, the information will be included in the encrypted information as identification information for display; and when updating and generating the discrimination label, the present application will screen out regular transaction objects from all transaction objects in the memory group based on whether the transaction records corresponding to the transaction objects meet the preset regular conditions. Exemplarily, the preset regular conditions may include: the time of the transaction record is within a fixed time range, or the transaction amount is a fixed value, etc., and a discrimination label is generated for the regular transaction object based on this transaction habit, and then the regular transaction objects are screened out for the regular transaction objects other than the regular transaction objects. and further, when receiving a historical transaction object query request from a user, the present application will authenticate the user, and during the verification process, the present application proposes that the user input the transaction intention of this transaction, and use this as a screening benchmark for screening out transaction objects related to the current user from the memory group, that is, when encrypting and displaying transaction objects, the present application only displays transaction objects related to the user's transaction intention, and will not encrypt and display all transaction objects in the memory group that have had transactions with the user. On the one hand, this operation can improve the user experience and achieve targeted display, and on the other hand, it can further reduce the risk of leakage of bank data information due to disclosure, and further strengthen the security management of bank data.

[0010] Optionally, each of the discrimination tags corresponds to a number of discrimination contents for comparison with the transaction intention, and each discrimination content corresponds to a risk level; The method further comprises: Periodically generating verification questions based on the discrimination labels corresponding to all transaction objects in the memory group, and storing the verification questions in a preset question library; The step of authenticating the user and obtaining the authentication information includes: Sending verification questions in the question library to the user to obtain verification information; The transaction intention is compared with the preset discrimination tag corresponding to each transaction object in the current memory group. If there is a first discrimination tag consistent with the transaction intention, it is considered that the verification is passed, including: Compare the transaction intention contained in the verification information with the preset discrimination label corresponding to each transaction object in the current memory group, and if there is a first discrimination label, and the first discrimination label contains the first discrimination content consistent with the transaction intention, determine the risk level of the first discrimination content; If the risk level of the first identified content is higher than the preset level, the verification is considered to be successful; If the risk level of the first judgment content is not higher than the preset level, then any second judgment content with a risk level higher than the preset level is selected from the first judgment label, and a verification question corresponding to the second judgment content is asked to the user; if the feedback content corresponding to the verification question fed back by the user is consistent with the second judgment content, the verification is considered to be passed, otherwise it is failed.

[0011] By adopting the above technical solution, in order to improve the screening efficiency of the first discrimination tag after the user issues a query instruction for the historical transaction object, the present application will regularly summarize verification questions based on all the discrimination tags in the memory group and update the question library, so that when the user identity needs to be verified in the future, the verification question will be directly asked to the user, and the user's answer to the verification question will be used as the transaction intention, and each discrimination tag of the present application will correspond to a number of discrimination contents, so as to further improve the search efficiency of the discrimination tag; in addition, the present application divides the discrimination contents contained in the discrimination tag into risk levels. If the transaction intention output by the user corresponds to the discrimination content with a lower risk level (i.e., lower than the preset level), it is necessary to further ask the user a verification question for secondary verification. Only when the transaction intention or feedback content output by the user corresponds to the discrimination content with a risk level higher than the preset level, the verification is considered to be passed; wherein, the risk level can be used to characterize the difficulty of the problem, and the identification content with a risk level lower than the preset level can be considered to be an answer that is easily guessed by illegal elements. Therefore, in order to prevent such a situation from leading to verification passing, the aforementioned solution of the present application is used for secondary verification to raise the threshold for verification passing.

[0012] Optionally, the first discrimination tag refers to a discrimination tag that is consistent with the transaction intention, wherein being consistent with the transaction intention means that the similarity with the transaction intention is higher than a preset similarity.

[0013] The step of encrypting the actual information of the transaction object corresponding to the first identification tag to obtain the encrypted information includes: According to the similarity between the transaction intention and the first identification tag, the actual information of the transaction object corresponding to the first identification tag is encrypted to obtain encrypted information; wherein, the lower the similarity, the higher the encryption degree of the corresponding encryption processing.

[0014] By adopting the above technical solution, considering that the transaction intention input by the user may not be completely consistent with the preset discrimination label, the present application proposes that when the similarity between the transaction intention and the discrimination label is higher than the preset similarity, the discrimination label is considered to be the first discrimination label. Furthermore, in order to be on the safe side, the present application proposes to determine the degree of encryption when encrypting the actual information based on the similarity, wherein the lower the similarity, the higher the corresponding degree of encryption, so as to further enhance the degree of anti-leakage of the actual information of the transaction object.

[0015] Optionally, the step of encrypting the actual information of the transaction object corresponding to the first identification tag to obtain the encrypted information further includes: When the similarity between the transaction intention and the first discrimination label is higher than the preset similarity, but is not completely the same as the first discrimination label, the transaction intention is compared with the relevant historical transaction intentions for similarity. If there is a relevant historical transaction intention that is completely the same as the current transaction intention, the first discrimination label is optimized based on the current transaction intention, so that the first discrimination label includes discrimination content that is completely the same as the current transaction intention, and the similarity between the current transaction intention and the first discrimination label is re-determined.

[0016] By adopting the above technical solution, the solution proposes to optimize the discrimination label based on transaction intention. The specific optimization method can be understood as capacity expansion, that is, expanding the number of discrimination contents corresponding to the discrimination label and improving the matching success rate of the transaction intention and the discrimination label.

[0017] Optionally, if there is a related historical transaction intention that is completely identical to the current transaction intention, it includes: If there is a related historical transaction intention that is exactly the same as the current transaction intention, or the transaction object corresponding to the first discrimination tag corresponding to the current transaction intention is a regular transaction object, and the time when the historical transaction object query request is made is within the fixed transaction time period corresponding to the regular transaction object.

[0018] By adopting the above technical solution, for transaction intentions with a similarity higher than a preset similarity but not completely the same as the first discrimination label, if the transaction intention is completely the same as the historical transaction intention, or the transaction object corresponding to the first discrimination label corresponding to the transaction intention is a regular transaction object, and the time when the corresponding historical transaction object query request is made is within the transaction period of the corresponding regular transaction object, it is considered that the current transaction intention can be used to optimize and expand the corresponding first discrimination label.

[0019] Optionally, the method further includes: The risk level of the user's corresponding account is determined regularly based on the amount and frequency of feedback content received from the user, and when the risk level is higher than a preset risk level, a warning message is sent to the user.

[0020] By adopting the above technical solution, the risk level of the corresponding bank account is determined based on the number and frequency of secondary inquiries made to the user and the feedback received from the user, and when the risk level is higher than the preset risk level, an early warning message is sent to the user so that the user can take measures such as changing the login password or account transaction password to prevent the account from being stolen.

[0021] In a second aspect, the present application provides a bank data security management system, comprising: A transaction record generation module, used to generate a transaction record whenever a transaction occurs; wherein the transaction record includes at least the identity information and account information of the transaction object; A transaction object memory module, used to regularly select transaction objects that meet preset memory conditions from transaction records, generate actual information for the selected transaction objects, and store the actual information in a preset memory group; wherein the actual information at least includes identity information and account information of the transaction object; The transaction object query module is used to authenticate the user whenever receiving a historical transaction object query request from the user. If the authentication is successful, the actual information of the transaction object related to the user in the memory group is encrypted to obtain encrypted information, and then the encrypted information is displayed; wherein the encrypted information at least includes discrimination information that can be used by the user to distinguish different transaction objects; The convenient transaction execution module is used to receive the convenient transaction instruction triggered by the user, determine the transaction object corresponding to the encrypted information based on the encrypted information in the convenient transaction instruction and the correspondence between the encrypted information and the actual information, and execute the transaction operation between the user and the determined transaction object.

[0022] In a third aspect, the present application provides a bank data security management device, comprising a memory and a processor, wherein the memory stores a computer program that can be loaded by the processor and execute any one of the methods described in the first aspect.

[0023] In a fourth aspect, the present application provides a computer-readable storage medium, characterized in that it stores a computer program that can be loaded by a processor and execute any one of the methods described in the first aspect.

[0024] In summary, this application includes the following beneficial technical effects: In the present application, when a user needs to conduct a transaction again with a transaction object that has been traded in a historical period, a historical transaction object query request can be triggered. At this time, the present application proposes to authenticate the user who triggered the request to ensure that the request is triggered by the user himself. Only after the verification is passed, the corresponding historical transaction object information will be displayed. Before displaying, the present application proposes to encrypt the information of the historical transaction object (that is, the actual information mentioned above) to generate encrypted information, and use the encrypted information instead of the actual information for display. When the user needs to trade with the displayed transaction object again, he can touch the encrypted information of the corresponding transaction object to trigger a convenient transaction instruction. In summary, the above-mentioned whole process can not only provide convenience for users to frequently trade with historical transaction objects, but also ensure that the privacy of transaction objects is not leaked while providing convenience, thereby optimizing the security management of bank data. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0026] Figure 1 It is a flow chart of a bank data security management method disclosed in an embodiment of the present application.

[0027] Figure 2 It is a structural block diagram of a bank data security management system disclosed in an embodiment of the present application.

[0028] Explanation of the accompanying drawings: 1. Transaction record generation module; 2. Transaction object memory module; 3. Transaction object query module; 4. Convenient transaction execution module. DETAILED DESCRIPTION

[0029] The following is combined with Figure 1-2 This application is described in further detail.

[0030] The embodiment of the present application discloses a bank data security management method. The bank data security management method is used to encrypt and manage bank transaction data to prevent criminals from stealing transaction information of transaction objects during the transaction process, thereby causing property losses to the transaction objects, and strengthen the security protection of bank transaction data. The execution subject of the bank data security management method of the present application is a bank data security management system, which will be described in conjunction with the attached Figure 1 The implementation steps of the bank data security management system (hereinafter referred to as the management system) for the bank data security management method are specifically explained.

[0031] S101, whenever a transaction occurs, a transaction record is generated; wherein the transaction record at least includes the identity information and account information of the transaction object.

[0032] In implementation, the transaction in the embodiment of the present application may specifically refer to a transfer transaction. A user may log in and access the bank system through the online APP corresponding to the management system, and submit a transfer transaction request, wherein the transaction request includes the transaction object and the transaction amount with the current user; the management system will execute the transaction operation according to the transaction request, transfer the amount in the user account consistent with the transaction amount to the account corresponding to the transaction object, and generate a transaction record after completing the transaction. The corresponding transaction record includes the execution time of the transaction request, the identity information and account information of the two transaction parties, wherein the two transaction parties are the transaction objects mentioned above.

[0033] S102, regularly screening out transaction objects that meet preset memory conditions from the transaction records, generating actual information for the screened transaction objects, and storing the actual information in a preset memory group; wherein the actual information at least includes the identity information and account information of the transaction objects.

[0034] In implementation, the preset memory condition may specifically include a preset transaction amount. For example, when the transaction amount included in the historical transaction record is greater than the preset transaction amount, it is considered that the preset memory condition is met. The actual information is specifically the identity information (such as name, ID number) and account information (such as bank account number, bank to which it belongs) of the transaction object.

[0035] S103, whenever a user's historical transaction object query request is received, the user's identity is authenticated. If the authentication is successful, the actual information of the transaction objects related to the user in the memory group is encrypted to obtain encrypted information, and then the encrypted information is displayed; wherein the encrypted information at least includes discrimination information that can enable the user to distinguish different transaction objects.

[0036] S104, receiving a convenient transaction instruction triggered by a user, determining a transaction object corresponding to the encrypted information based on the encrypted information in the convenient transaction instruction and the correspondence between the encrypted information and the actual information, and executing a transaction operation between the user and the determined transaction object.

[0037] In implementation, after making a transfer transaction request, the user can make a historical transaction object query request. The management system is used to authenticate the user when receiving the historical transaction object query request made by the user. If the verification is successful, the actual information of the transaction object related to the user will be encrypted and displayed after obtaining the encrypted information. In order to enable the user to know the transaction object corresponding to the encrypted information based on the encrypted information, the encrypted information of this application also specifically includes discrimination information. Based on the displayed encrypted information, the user can trigger a convenient transaction instruction by touching a certain encrypted information or other methods. The convenient transaction instruction includes the transaction object corresponding to the encrypted information touched by the user. Then the management system will jump to the transfer transaction interface for the user to enter the transfer amount and transaction password, and execute the current transaction operation after obtaining the transfer amount and transaction password and successfully verifying the transaction password with the pre-stored transaction password, and then generate a transaction record after the transaction operation is completed.

[0038] Optionally, the step of “authenticating the user, and if the authentication is successful, encrypting the actual information of the transaction object related to the user in the memory group to obtain encrypted information, and then displaying the encrypted information” in S103 specifically includes the following steps: S1031, authenticate the user's identity and obtain verification information; wherein the verification information at least includes the transaction intention input by the user.

[0039] S1032, comparing the transaction intention with the preset discrimination tags corresponding to each transaction object in the current memory group, if there is a first discrimination tag consistent with the transaction intention, it is considered that the verification is passed; S1033, if the verification is successful, encrypt the actual information of the transaction object corresponding to the first identification tag to obtain encrypted information, and then display the encrypted information, wherein the encrypted information includes the identification information, and the identification information is the transaction intention.

[0040] The bank data security management method also includes the following steps: Periodically determine whether there is a regular transaction object among all transaction objects in the memory group. If so, update the corresponding discrimination label for the regular transaction object based on the transaction habits of the regular transaction object; wherein the regular transaction object is a transaction object whose corresponding transaction record meets the preset regular conditions; Regularly update and generate corresponding discriminant labels for other transaction objects in the memory group except for regular transaction objects; Periodically generate verification questions based on the discrimination labels corresponding to all transaction objects in the memory group, and store the verification questions in a preset question library.

[0041] S1031 specifically includes the following sub-steps: Send verification questions in the question library to the user to obtain verification information; S1032 specifically includes the following sub-steps: Compare the transaction intention contained in the verification information with the preset discrimination tags corresponding to each transaction object in the current memory group. If there is a first discrimination tag, and the first discrimination tag contains the first discrimination content consistent with the transaction intention, determine the risk level of the first discrimination content; If the risk level of the first identified content is higher than the preset level, the verification is considered to be passed; If the risk level of the first judgment content is not higher than the preset level, then any second judgment content higher than the preset level is selected from the first judgment label, and the verification question corresponding to the second judgment content is asked to the user. If the feedback content corresponding to the verification question fed back by the user is consistent with the second judgment content, the verification is considered to be passed, otherwise it is failed.

[0042] In implementation, when performing user identity authentication, the management system is used to display all verification questions in the preset question library to the user, and the user can selectively answer any of the verification questions, and the user's answer content is the transaction intention described above. In other embodiments, the verification information may also include facial information. Specifically, before sending the verification questions to the user for the user to answer, the management system may also send a facial recognition to the user for the user to enter facial information. The management system is used to compare the facial information currently entered by the user with the facial information pre-stored by the user to whom the current account belongs. When the comparison is consistent, the verification question is sent to the user. If the facial verification fails, it is considered that the verification has failed.

[0043] When the management system obtains the transaction intention input by the user, the management system is used to compare the transaction intention with the discrimination label corresponding to each transaction object in the memory group, and specifically to compare the transaction intention with all the discrimination contents contained in each discrimination label one by one; wherein, each transaction object in the memory group not only corresponds to identity information and account information, but also includes a discrimination label corresponding to the current user, and the discrimination label specifically includes several discrimination contents, and each discrimination content corresponds to a risk level.

[0044] If there is a first discrimination tag that satisfies: the first discrimination tag contains first discrimination content whose similarity with the transaction intention is higher than the preset similarity, then it is considered that there is a first discrimination tag consistent with the transaction intention. At this time, the management system will determine whether the risk level of the first discrimination content is higher than the preset level. If it is, it is considered that the verification is passed. Otherwise, any discrimination content (i.e., the second discrimination content) with a risk level higher than the preset level is selected from the first discrimination tag, and the verification question corresponding to the second discrimination content is sent to the user, so that the user can obtain and output the feedback content (i.e., the user's answer to the verification question). If the similarity between the feedback content and the second discrimination content is higher than the preset similarity, it is considered that the feedback content is consistent with the second discrimination content, and the verification is considered to be passed.

[0045] Each user corresponds to a memory group, and each memory group may contain several transaction objects, which are users with whom the user has had transfer transactions in the past period. Each transaction object corresponds to a discrimination tag, and the discrimination tag includes discrimination content, which may be multiple, and the discrimination content is used for users to distinguish different transaction objects in the memory group.

[0046] For example, transaction object A corresponds to identification tag a and identification tag A2, and identification tag a includes identification content Aa1 and identification content Aa2; identification content Aa1 can specifically be mother, that is, identification content Aa1 describes the identity relationship between associated object B and transaction object A, and associated object B is the mother of transaction object A; the specific content of identification content Aa2 can be the name of the associated object or a customized nickname.

[0047] The management system is used to provide the user with an automatic function each time a transaction is completed and a transaction record is generated, so that the user can enter the custom content between the user and the transaction object in the transaction record. The management system is used to use the custom content entered by the user as the discrimination content between the user and the transaction object, and add the discrimination content to the discrimination label of the corresponding transaction object in the memory group, so as to update the discrimination label of the transaction object in the memory group; in addition, the present application proposes that the management system can also automatically generate discrimination content for regular transaction objects, specifically: the management system is used to periodically determine whether there is a transaction object (i.e., a regular transaction object) that meets the preset regularity conditions from all transaction objects in the memory group. The specific determination method can be: the management system determines whether the maximum time difference between the transaction time in all transaction records corresponding to the user and the target transaction object is less than the preset time difference based on the transaction time and transaction amount in the transaction record. If a fixed transaction time period is generated based on this transaction habit, the fixed transaction time period is added as the discrimination content to the corresponding discrimination label. Among them, the fixed transaction time period is the time interval composed of the earliest transaction time and the latest transaction time among all the aforementioned transaction times; In addition, if the maximum difference in transaction amount among all transaction records corresponding to the user and the target transaction object is less than the preset difference, the transaction amount range is generated based on this transaction habit; if the transaction amount among all transaction records corresponding to the user and the target transaction object is a fixed amount (such as RMB 500, RMB 1,000), the transaction amount value is generated based on this transaction habit. The transaction amount range and / or transaction amount value here is added as the discrimination content to the corresponding discrimination tag; the discrimination tag of the regular transaction object is regularly updated.

[0048] Optionally, before “encrypting the actual information of the transaction object corresponding to the first identification tag to obtain encrypted information” in S1033, the following steps are also included: When the similarity between the transaction intention and the first discrimination label is higher than the preset similarity, but is not exactly the same as the first discrimination label, the transaction intention is compared with the relevant historical transaction intentions for similarity. If there is a relevant historical transaction intention that is exactly the same as the current transaction intention, or the transaction object corresponding to the first discrimination label corresponding to the current transaction intention is a regular transaction object, and the time when the historical transaction object query request is made is within the transaction period corresponding to the regular transaction object, the first discrimination label is optimized based on the current transaction intention, so that the first discrimination label includes discrimination content that is exactly the same as the current transaction intention, and the similarity between the current transaction intention and the first discrimination label is re-determined.

[0049] The “encrypting the actual information of the transaction object corresponding to the first identification tag to obtain encrypted information” in S1033 specifically includes: According to the similarity between the transaction intention and the first discrimination tag, the actual information of the transaction object corresponding to the first discrimination tag is encrypted to obtain encrypted information; wherein, the lower the similarity, the higher the encryption degree of the corresponding encryption processing.

[0050] In implementation, when the similarity between the transaction intention and the first discrimination label is higher than the preset similarity, but is not completely the same as the first discrimination label, the management system will determine whether the transaction intention meets the conditions for optimizing the first discrimination label. The conditions are specifically divided into two: one is: whether there is a transaction intention that is completely the same as the current transaction intention in the transaction intention corresponding to the first discrimination label in the historical period (that is, the relevant historical transaction intention); the second is: when the transaction object corresponding to the first discrimination label corresponding to the current transaction intention is a regular transaction object, and the time when the historical transaction object query request is made is within the fixed transaction time period corresponding to the regular transaction object, the first discrimination label is optimized based on the current transaction intention.

[0051] If any of the above conditions is met, the management system will optimize the first discrimination label based on the current transaction intention. The specific optimization method is: add the current transaction intention as the discrimination content to the corresponding first discrimination label, so as to expand the number of discrimination contents contained in the first discrimination label.

[0052] After completing the above operations, the similarity between the current transaction intention and the optimized first discrimination label is determined, and the degree of encryption of the actual information is determined based on the similarity. The encryption technology can be the existing technology, and the encryption degree can be considered as encryption strength. The lower the similarity, the stronger the encryption strength of the actual information, and the more difficult it is to crack the corresponding encrypted information.

[0053] Optionally, the bank data security management method further includes the following steps: The risk level of the user's corresponding account is regularly determined based on the amount and frequency of feedback content received from the user. When the risk level is higher than the preset risk level, an early warning message is sent to the user.

[0054] In implementation, the receiving frequency can be considered as the inverse of the interval between two adjacent feedback contents received from the same user. The management system is used to obtain a risk value based on the weighted sum of the number of feedback contents and the receiving frequency. If the risk value is greater than the preset risk level, an early warning message is sent to the user, such as in the form of a text message, to remind the user that the current account is at risk of being stolen and it is recommended to change the password.

[0055] The present application also discloses a bank data security management system. Figure 2 , the bank data security management system includes: The transaction record generation module 1 is used to generate a transaction record whenever a transaction occurs; wherein the transaction record at least includes the identity information and account information of the transaction object; The transaction object memory module 2 is used to regularly select transaction objects that meet preset memory conditions from the transaction records, generate actual information for the selected transaction objects, and store the actual information in a preset memory group; wherein the actual information at least includes the identity information and account information of the transaction object; The transaction object query module 3 is used to perform identity verification on the user whenever receiving a historical transaction object query request from the user. If the verification is successful, the actual information of the transaction object related to the user in the memory group is encrypted to obtain encrypted information, and then the encrypted information is displayed; wherein the encrypted information at least includes discrimination information that can be used by the user to distinguish different transaction objects; The convenient transaction execution module 4 is used to receive the convenient transaction instruction triggered by the user, determine the transaction object corresponding to the encrypted information based on the encrypted information in the convenient transaction instruction and the correspondence between the encrypted information and the actual information, and execute the transaction operation between the user and the determined transaction object.

[0056] Optionally, the transaction object query module 3 is also used to authenticate the user and obtain verification information; wherein the verification information at least includes the transaction intention input by the user; it is also used to compare the transaction intention with the preset discrimination tag corresponding to each transaction object in the current memory group, and if there is a first discrimination tag consistent with the transaction intention, the verification is considered to be successful; it is also used to encrypt the actual information of the transaction object corresponding to the first discrimination tag to obtain encrypted information if the verification is successful, and then display the encrypted information, wherein the encrypted information contains discrimination information, and the discrimination information is the transaction intention.

[0057] It also includes a discrimination label determination module, which is used to regularly determine whether there is a regular transaction object among all the transaction objects in the memory group. If so, based on the transaction habits of the regular transaction object, the corresponding discrimination label is updated for the regular transaction object; wherein the regular transaction object is a transaction object whose corresponding transaction record meets preset regular conditions; and it is also used to regularly update and generate corresponding discrimination labels for other transaction objects in the memory group except the regular transaction object.

[0058] Optionally, it also includes a verification question collection module, which is used to regularly generate verification questions based on the discrimination labels corresponding to all transaction objects in the memory group, and store the verification questions in a preset question library; The transaction object query module 3 is also used to send verification questions in the question library to the user to obtain verification information; it is also used to compare the transaction intention contained in the verification information with the preset discrimination label corresponding to each transaction object in the current memory group. If there is a first discrimination label, and the first discrimination label contains the first discrimination content consistent with the transaction intention, the risk level of the first discrimination content is determined; it is also used to consider that the verification is passed if the risk level of the first discrimination content is higher than the preset level; it is also used to select any second discrimination content higher than the preset level from the first discrimination label if the risk level of the first discrimination content is not higher than the preset level, and ask the user the verification question corresponding to the second discrimination content. If the feedback content corresponding to the verification question fed back by the user is consistent with the second discrimination content, the verification is considered to be passed, otherwise it is not passed.

[0059] Optionally, the transaction object query module 3 is also used to encrypt the actual information of the transaction object corresponding to the first discrimination tag to obtain encrypted information according to the similarity between the transaction intention and the first discrimination tag; wherein, the lower the similarity, the higher the encryption degree of the corresponding encryption processing.

[0060] Optionally, the transaction object query module 3 is also used to compare the transaction intention with relevant historical transaction intentions for similarity when the similarity between the transaction intention and the first discrimination label is higher than a preset similarity but not exactly the same as the first discrimination label. If there is a relevant historical transaction intention that is exactly the same as the current transaction intention, the first discrimination label is optimized based on the current transaction intention, so that the first discrimination label includes discrimination content that is exactly the same as the current transaction intention, and the similarity between the current transaction intention and the first discrimination label is re-determined.

[0061] Optionally, the transaction object query module 3 is also used to check if there is a related historical transaction intention that is exactly the same as the current transaction intention, or if the transaction object corresponding to the first discrimination label corresponding to the current transaction intention is a regular transaction object, and the time when the historical transaction object query request is made is within the transaction period corresponding to the regular transaction object.

[0062] Optionally, it also includes a warning information triggering module, which is used to regularly determine the risk level of the user's corresponding account based on the amount and frequency of feedback content received from the user, and send a warning message to the user when the risk level is higher than the preset risk level.

[0063] The embodiment of the present application also discloses a bank data security management device, which includes a memory and a processor. The memory stores a computer program that can be loaded by the processor and execute the bank data security management method as described above.

[0064] An embodiment of the present application also discloses a computer-readable storage medium, which stores a computer program that can be loaded by a processor and execute the bank data security management method as described above. The computer-readable storage medium includes, for example: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0065] It should be noted that, in this document, relational terms such as first and second, etc. are merely used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations.

[0066] The above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit the protection scope of the application. Obviously, the described embodiments are only some embodiments of the present application, rather than all embodiments. Based on these embodiments, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application.

Claims

1. A bank data security management method, characterized in that: include: Whenever a transaction occurs, a transaction record is generated; wherein the transaction record includes at least the identity information and account information of the transaction object; Periodically screening out transaction objects that meet preset memory conditions from transaction records, generating actual information for the screened transaction objects, and storing the actual information in a preset memory group; wherein the actual information at least includes identity information and account information of the transaction objects; Whenever a user's historical transaction object query request is received, the user's identity is authenticated. If the authentication is successful, the actual information of the transaction object related to the user in the memory group is encrypted to obtain encrypted information, and then the encrypted information is displayed; wherein the encrypted information at least includes discrimination information that can be used by the user to distinguish different transaction objects; Receive a convenient transaction instruction triggered by a user, determine the transaction object corresponding to the encrypted information based on the encrypted information in the convenient transaction instruction and the correspondence between the encrypted information and the actual information, and execute the transaction operation between the user and the determined transaction object.

2. The bank data security management method according to claim 1, characterized in that: The user identity verification is performed, and if the verification is successful, the actual information of the transaction object related to the user in the memory group is encrypted to obtain encrypted information, and then the encrypted information is displayed, including: Performing identity verification on the user and obtaining verification information; wherein the verification information at least includes the transaction intention input by the user; The transaction intention is compared with the preset discrimination tags corresponding to each transaction object in the current memory group. If there is a first discrimination tag consistent with the transaction intention, it is considered that the verification is passed; If the verification is successful, the actual information of the transaction object corresponding to the first identification tag is encrypted to obtain encrypted information, and then the encrypted information is displayed, wherein the encrypted information contains identification information, and the identification information is the transaction intention; The method further comprises: Periodically determine whether there is a regular transaction object among all transaction objects in the memory group, and if so, update the corresponding discrimination tag for the regular transaction object based on the transaction habits of the regular transaction object; wherein the regular transaction object is a transaction object whose corresponding transaction record meets the preset regular condition; Regularly update and generate corresponding discriminant labels for other transaction objects in the memory group except regular transaction objects.

3. The bank data security management method according to claim 2, characterized in that: Each of the identification tags corresponds to a number of identification contents for comparison with the transaction intention, and each identification content corresponds to a risk level; The method further comprises: Periodically generating verification questions based on the discrimination labels corresponding to all transaction objects in the memory group, and storing the verification questions in a preset question library; The step of authenticating the user and obtaining the authentication information includes: Sending verification questions in the question library to the user to obtain verification information; The transaction intention is compared with the preset discrimination tag corresponding to each transaction object in the current memory group. If there is a first discrimination tag consistent with the transaction intention, it is considered that the verification is passed, including: Compare the transaction intention contained in the verification information with the preset discrimination label corresponding to each transaction object in the current memory group, and if there is a first discrimination label, and the first discrimination label contains the first discrimination content consistent with the transaction intention, determine the risk level of the first discrimination content; If the risk level of the first identified content is higher than the preset level, the verification is considered to be successful; If the risk level of the first judgment content is not higher than the preset level, then any second judgment content with a risk level higher than the preset level is selected from the first judgment label, and a verification question corresponding to the second judgment content is asked to the user; if the feedback content corresponding to the verification question fed back by the user is consistent with the second judgment content, the verification is considered to be passed, otherwise it is failed.

4. The bank data security management method according to claim 2, characterized in that: The first discrimination label refers to a discrimination label that is consistent with the transaction intention, wherein the consistency with the transaction intention means that the similarity with the transaction intention is higher than a preset similarity; The step of encrypting the actual information of the transaction object corresponding to the first identification tag to obtain the encrypted information includes: According to the similarity between the transaction intention and the first identification tag, the actual information of the transaction object corresponding to the first identification tag is encrypted to obtain encrypted information; wherein, the lower the similarity, the higher the encryption degree of the corresponding encryption processing.

5. The bank data security management method according to claim 4, characterized in that: The step of encrypting the actual information of the transaction object corresponding to the first identification tag to obtain the encrypted information further includes: When the similarity between the transaction intention and the first discrimination label is higher than the preset similarity, but is not completely the same as the first discrimination label, the transaction intention is compared with the relevant historical transaction intentions for similarity. If there is a relevant historical transaction intention that is completely the same as the current transaction intention, the first discrimination label is optimized based on the current transaction intention, so that the first discrimination label includes discrimination content that is completely the same as the current transaction intention, and the similarity between the current transaction intention and the first discrimination label is re-determined.

6. The bank data security management method according to claim 5, characterized in that: If there is a relevant historical transaction intention that is exactly the same as the current transaction intention, it includes: If there is a related historical transaction intention that is exactly the same as the current transaction intention, or the transaction object corresponding to the first discrimination tag corresponding to the current transaction intention is a regular transaction object, and the time when the historical transaction object query request is made is within the fixed transaction time period corresponding to the regular transaction object.

7. The bank data security management method according to claim 3, characterized in that: The method further comprises: The risk level of the user's corresponding account is determined regularly based on the amount and frequency of feedback content received from the user, and when the risk level is higher than a preset risk level, a warning message is sent to the user.

8. A bank data security management system, characterized in that: include, A transaction record generating module (1), configured to generate a transaction record whenever a transaction occurs; wherein the transaction record includes at least the identity information and account information of the transaction object; A transaction object memory module (2) is used to regularly select transaction objects that meet preset memory conditions from transaction records, generate actual information for the selected transaction objects, and store the actual information in a preset memory group; wherein the actual information at least includes identity information and account information of the transaction objects; a transaction object query module (3), configured to perform identity verification on the user whenever a historical transaction object query request is received from the user, and if the verification is successful, encrypt the actual information of the transaction object related to the user in the memory group to obtain encrypted information, and then display the encrypted information; wherein the encrypted information at least includes discrimination information that can be used by the user to distinguish different transaction objects; The convenient transaction execution module (4) is used to receive a convenient transaction instruction triggered by a user, determine the transaction object corresponding to the encrypted information based on the encrypted information in the convenient transaction instruction and the corresponding relationship between the encrypted information and the actual information, and execute the transaction operation between the user and the determined transaction object.

9. A bank data security management device, characterized in that: The method comprises a memory and a processor, wherein the memory stores a computer program that can be loaded by the processor and execute any one of the methods according to claims 1 to 7.

10. A computer-readable storage medium, characterized in that: A computer program is stored which can be loaded by a processor and execute any one of the methods as claimed in claims 1 to 7.

Images