Early warning method and device, server and storage medium
By receiving multiple target events completed by the target object and integrating them into the target event stream, and combining preset warning rules to determine the target warning rules, the problems of excessive data flow consumption and resource load in the existing technology are solved, and efficient early warning rules are achieved.
Patent Information
- Application Number
- CN202411719052.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-27
- Publication Date
- 2025-03-21
AI Technical Summary
When determining the warning rules triggered by the target object, the data flow processing is required for each target event, resulting in excessive consumption of data flow and resource load problems.
By receiving multiple target events completed by the target object, integrating them into the target event stream at different target moments, and matching the target event stream with the preset warning rules is determined to reduce the consumption of the data stream.
It realizes the warning rules for accurately determining the target object without increasing data stream processing, reducing resource consumption and avoiding the occurrence of load problems.
Smart Images

Figure CN119676049A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of computer technology, and in particular to an early warning method, device, server and storage medium. Background Art
[0002] With the increasing application of big data technology, the management and control of target objects has become more and more efficient. By collecting target events completed by target objects, it can be determined in different ways whether early warnings are needed for target objects.
[0003] In the prior art, in order to determine the warning rules triggered by the target object, it is usually necessary to judge each target event completed by the target object, and each target event corresponds to a data stream for processing, so as to determine the corresponding warning method. However, when the target object completes a target event, a data stream needs to be processed. If there are multiple target objects and each target object completes multiple target events, a large amount of data streams will be consumed, which will cause a heavy load on resource requirements. Summary of the invention
[0004] In order to solve the above-mentioned problems in the prior art, the example of the present application provides an early warning method, device, server and storage medium, which can reduce the consumption of data flow and avoid the problem of load on resource requirements.
[0005] In a first aspect, an embodiment of the present application provides an early warning method, comprising:
[0006] Receiving multiple target events completed by a target object; the multiple target events correspond to different target moments;
[0007] Integrate the multiple target events into a target event stream according to the different target moments;
[0008] If it is determined that the completion order of multiple target events in the target event stream is the same as the arrangement order of events in any preset warning rule, and the number of target events in the target event stream is greater than or equal to the number of warning events in the same any warning rule, then any warning rule will be used as the target warning rule; any warning rule is pre-set for the target object; any warning rule includes multiple warning events.
[0009] Through the early warning method provided in the present application, multiple target events completed by the target object are integrated into a target event stream, and the target event stream is processed to determine the corresponding target early warning rule. In this process, only one data stream is needed to determine the target early warning rule from multiple warning rules according to the target event stream, which reduces the consumption of data stream and avoids the problem of load on resource requirements.
[0010] In a possible implementation manner, the receiving multiple target events completed by the target object includes:
[0011] Receiving first information; the first information includes a warning mark of the target object;
[0012] If the warning mark of the target object is in the first state, wait for the warning mark of the target object to change to the second state; the warning mark in the first state is used to indicate that there is no need to issue a warning for the target object; the warning mark in the second state is used to indicate that a warning is required for the target object;
[0013] If the warning mark of the target object is in the second state, the preset rule is set for the target object, and a plurality of target events completed by the target object are received.
[0014] Use the early warning mark to determine whether the target object needs to be monitored, wait for the target object that does not need to be monitored until the target object needs to be monitored, and receive the target event completed by the target object for the target object that needs to be monitored, so as to avoid wasting data flow on the target object that does not need to be monitored and save resources.
[0015] In a possible implementation manner, the first information further includes basic information of the target object; and the method further includes:
[0016] The following steps are used to determine multiple warning rules:
[0017] Determining a plurality of warning events corresponding to the target object from a preset event set based on the basic information of the target object;
[0018] Combining any number of warning events from the multiple warning events to obtain multiple combinations;
[0019] Each combination is taken as an independent early warning rule to obtain the plurality of early warning rules.
[0020] Corresponding warning events can be determined for different target objects, and the determined warning events can be combined to obtain multiple warning rules, so that each target object can be warned more specifically.
[0021] In a possible implementation manner, after taking any of the warning rules as the target warning rule, the method further includes:
[0022] Acquire the urgency of the target warning rule based on the first relationship table; the first relationship table is used to characterize the correspondence between the multiple warning rules and the urgency; the first relationship table is established after obtaining the multiple warning rules;
[0023] If it is determined that the urgency is greater than or equal to the first threshold, a first prompt message is sent to the target terminal device; the first prompt message is used to prompt the user to process the target object; the first prompt message includes the first information of the target object, the target event flow and the processing measures for the target object;
[0024] If it is determined that the urgency level is less than the first threshold, a second prompt message is sent to the target terminal device; the second prompt message is used to prompt the user to issue an early warning for the target object; the second prompt message includes the first information of the target object, the target event flow and the early warning measures for the target object.
[0025] Using the degree of urgency to determine the processing priority of the target object and judge whether it is necessary to issue an early warning to the target object or to process the target object can improve the accuracy of decision-making and increase the flexibility of the organization.
[0026] In a possible implementation manner, there is a first time interval between two adjacent warning events in any one of the warning rules; and taking any one of the warning rules as a target warning rule includes:
[0027] Determine a second time interval between any two adjacent events in the target event stream;
[0028] If each second time interval is less than or equal to the corresponding first time interval, any one of the warning rules is used as the target warning rule.
[0029] A time interval is added to the warning rule to determine whether adjacent events in the target event stream occur within the set time interval, which improves the accuracy of the warning and reduces the possibility of some false warnings.
[0030] In a possible implementation manner, whether the completion order of multiple target events in the target event stream is the same as the arrangement order of events in any warning rule in the preset rules is determined in the following manner:
[0031] If the number of events in any one of the warning rules is the same as the number of multiple target events in the target event stream, then determining the previous event and the next event of each target event in the multiple target events, and the previous event and the next event of each warning event in any one of the warning rules;
[0032] If the previous event and the next event of each target event in the multiple target events are the same as the previous event and the next event of the corresponding warning event in any of the warning rules, then the completion order of the multiple target events in the target event stream is determined to be the same as the arrangement order of the events in any of the warning rules in the preset rules.
[0033] Compared with the prior art which uses multiple data streams to judge each warning event and consumes a large amount of data streams, the present application can reduce the consumption of data streams by determining the dependency relationship of each event in the target event stream.
[0034] In a possible implementation, the method further includes:
[0035] After any of the warning rules is used as the target warning rule, if a target event completed by the target object is received again, the newly added target event is added to the target event stream, and the step of determining the target warning rule is re-executed.
[0036] If the target object is still completing the target event, the newly completed target event can be added to the target event stream to continue the judgment, which can also reduce the consumption of data stream.
[0037] In a second aspect, an embodiment of the present application provides an early warning device, including:
[0038] A target event stream generating unit, configured to receive a plurality of target events completed by a target object; the plurality of target events correspond to different target moments;
[0039] Integrate the multiple target events into a target event stream according to the different target moments;
[0040] A target warning rule determination unit is used to determine that if the completion order of multiple target events in the target event stream is determined to be the same as the arrangement order of events in any preset warning rule, and the number of target events in the target event stream is greater than or equal to the number of warning events in the same any warning rule, then use any warning rule as the target warning rule; any warning rule is pre-set for the target object; and any warning rule includes multiple warning events.
[0041] In a third aspect, an embodiment of the present application provides an electronic device, including:
[0042] A memory for storing program instructions;
[0043] The processor is used to call the program instructions stored in the memory and execute the steps included in the method described in the first aspect according to the obtained program instructions.
[0044] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described in the first aspect is implemented.
[0045] The example of the present application provides an early warning method, device, server and storage medium, which can receive multiple target events completed by a target object, and integrate the multiple target events into a target event stream according to the time corresponding to each target event. If the completion order of the multiple target events in the target event stream is determined to be the same as the arrangement order of the events in any preset early warning rule, and the number of target events in the target event stream is the same as the number of warning events in the same early warning rule, then any early warning rule will be used as the target early warning rule. In this process, only one data stream is needed to determine the target early warning rule from multiple warning rules according to the target event stream, which reduces the consumption of data streams and avoids the problem of load on resource requirements. BRIEF DESCRIPTION OF THE DRAWINGS
[0046] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.
[0047] Figure 1 A schematic diagram of an application scenario of an early warning method provided in an embodiment of the present application;
[0048] Figure 2 A flowchart of an early warning method provided in an embodiment of the present application;
[0049] Figure 3 A schematic diagram of a first prompt information provided in an embodiment of the present application;
[0050] Figure 4 A schematic diagram of a second prompt information provided in an embodiment of the present application;
[0051] Figure 5 A specific flow chart of an early warning method provided in an embodiment of the present application;
[0052] Figure 6 A structural block diagram of an early warning device provided in an embodiment of the present application;
[0053] Figure 7 A structural block diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION
[0054] In order to make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Among them, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.
[0055] In the description of the embodiments of the present application, unless otherwise specified, "and" means or. For example, A / B can mean A or B. The "and / or" in the text is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone.
[0056] Specifically, in the description of the present application, it needs to be understood that the terms "center", "longitudinal", "lateral", "length", "width", "thickness", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", "clockwise", "counterclockwise" and the like indicate orientations or positional relationships based on the orientations or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present application and simplifying the description, and do not indicate or imply that the referred device or element must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present application, and, unless otherwise specified, the "connection" and "connection" mentioned in the present application include direct and indirect connections (connections).
[0057] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, the features defined as "first" and "second" may explicitly or implicitly include one or more of the features. In the description of this application, the meaning of "plurality" is two or more, unless otherwise clearly and specifically defined.
[0058] The present application is further described in detail below with reference to the accompanying drawings and specific embodiments.
[0059] In one possible embodiment, Figure 1 A schematic diagram of an application scenario of an early warning method provided in an embodiment of the present application is shown. Figure 1 As shown, Figure 1It includes an electronic device 100 and multiple terminal devices, such as terminal device 200, terminal device 300, and terminal device 400, wherein the electronic device 100 can implement the early warning method in this application, thereby sending the corresponding first prompt information or second prompt information to terminal devices such as terminal device 200 through wireless communication, and each terminal device can be used to receive the first prompt information or second prompt information sent by the electronic device 100. Each terminal device corresponds to a different staff member, and can be a mobile phone, tablet computer, and portable wearable device of a different staff member, wherein the portable wearable device can be a smart watch, a smart bracelet, a head-mounted device, etc. It should be noted that the number of terminal devices is not limited in this application, and different staff members can have different numbers of terminal devices, and can have more terminal devices or fewer terminal devices. The same is that multiple terminal devices are all connected to the electronic device 100 for communication.
[0060] Figure 1 The application scenario is only an example of an application scenario for implementing the embodiment of the present application. The embodiment of the present application is not limited to the above Figure 1 The application scenarios described. The classification extraction method provided by the exemplary embodiment of the present application is described below with reference to the accompanying drawings in combination with the application scenarios described above. It should be noted that the application scenarios described above are only shown to facilitate understanding of the spirit and principles of the present application, and the implementation of the present application is not limited in this respect.
[0061] Figure 2 A flowchart of an early warning method provided by an embodiment of the present application is shown. Figure 2 As shown, the method may include the following steps:
[0062] Step S201, receiving multiple target events completed by the target object.
[0063] In a possible embodiment, each of the multiple target events corresponds to a different target time, and the target event can be received in the following manner: first, the first information can be received, wherein the first information includes a warning mark of the target object, and the warning mark includes two states. When the warning mark is in the first state, it can be considered that the target object is offline, and there is no need to issue a warning for the target object; when the warning mark is in the second state, it can be considered that the target object is online, and it is necessary to issue a warning for the target object. Therefore, after receiving the warning mark contained in the first information, the state of the warning mark can be determined. If the warning mark of the target object is in the first state, the target event can be received after the warning mark of the target object changes to the second state; if the warning mark of the target object is in the second state, multiple target events completed by the target object can be received. For example, the first information of the target object A is received, wherein if the warning mark corresponding to the target object A is in the first state, no warning is issued for the target object A; if the warning mark corresponding to the target object A is in the second state, or changes from the first state to the second state, a warning can be issued for the target object A. Targeted monitoring and warning can be carried out according to the online and offline conditions of the target object to avoid waste of resources.
[0064] In a possible embodiment, while receiving multiple target events completed by the target object, or before receiving multiple target events completed by the target object, the following steps can be used to determine multiple warning rules for the target object: based on the basic information of the target object, multiple warning events corresponding to the target object are determined from a pre-set event set, and any number of warning events in the multiple warning events are combined to obtain multiple combinations, each combination being an independent warning rule, so that multiple warning rules can be obtained. For example, the pre-set event set corresponding to the target object A includes event a, event b, and event c. If event a is riding a transportation vehicle, event b is staying in a hotel, and event c is making a purchase, then different combinations can be made according to different needs. For example, if the target object A is monitored to check in to a hotel after riding a transportation vehicle, event a and event b can be combined to obtain the corresponding warning rule. If the target object A is monitored to make a purchase after checking in to a hotel, event b and event c can be combined to obtain the corresponding warning rule. The two warning rules can also be combined. The warning rules event a, event b, and event c are used to monitor whether the target object A checks in to a hotel after riding a transportation vehicle and makes a purchase after checking in to a hotel. It should be noted that in some cases, a single event can also become an independent warning rule, and the warning rules can be differently limited according to different needs, which is not limited in this application. In addition, after obtaining each warning rule, a first time interval can be added to each two adjacent warning events in the warning rule. For example, for the warning rules event a, event b, and event c, there can be a first time interval of 6 hours between event a and event b, and there can be a first time interval of 4 hours between event b and event c. It should be noted that the first time interval between each two adjacent warning events can be set differently according to needs, which is not limited in this application.
[0065] In a possible embodiment, each warning rule may correspond to an urgency level, and different warning rules may be set to different urgency levels according to user settings. Generally, in a warning rule, the more events included, the higher the urgency level of the warning rule can be considered. Similarly, a certain event can be regarded as an important event, and any warning rule containing an important event can be set as a warning rule with a high urgency level. The correspondence between the warning rule and the urgency level can be saved in the first relationship table.
[0066] Step S202: Integrate multiple target events into a target event stream according to different target times.
[0067] In a possible embodiment, since each of the multiple target events completed by the target object received in step S201 corresponds to a different target time, the multiple target events can be integrated into a target event stream according to different target times. For example, event a completed at 8 a.m., event b completed at noon, and event c completed at 3 p.m., then these three events can be integrated into a target event stream of event a, event b, and event c.
[0068] Step S203: determining a target warning rule based on the target event flow and a plurality of preset warning rules.
[0069] In a possible embodiment, after obtaining the target event stream, the corresponding target warning rules can be determined for the target event stream and multiple warning rules. The completion order of multiple target events in the target event stream and the arrangement order of events in any of the multiple warning rules can be compared. If the arrangement order is the same, the judgment can be continued. Under normal circumstances, the judgment can be continued only if the number of events in the warning rule is less than or equal to the number of target events in the target event stream. For example, if the target event stream is event a event b, if the arrangement order of events in warning rule 1 is event a event b, the judgment can be continued; if the event in warning rule 1 is only event a, the judgment can also be continued; however, if the arrangement order of events in warning rule 1 is event a event b event c, or the arrangement order of events in warning rule 1 is event a event c, the judgment can be stopped, and the current target event stream must be inconsistent with warning rule 1. After determining the order of events and the quantitative relationship, the time interval between any two events can be further determined to determine the second time interval between any two adjacent events in the target event stream. If each second time interval is less than or equal to the corresponding first time interval, the corresponding warning rule can be used as the target warning rule. For example, the target event stream is event a, event b, and event c. The second time interval between event a and event b is 4 hours, and the second time interval between event b and event c is 5 hours. Warning rule 1 is event a, event b, and event c. The first time interval between event a and event b is 6 hours, and the first time interval between event b and event c is 6 hours. Then, it can be determined that warning rule 1 is the target warning rule for the target event stream.
[0070] In a possible embodiment, the completion order of multiple target events in the target event stream and whether the arrangement order of events in any warning rule among multiple warning rules is the same can be determined by the following method. The previous event and the next event of each target event in the multiple target events and the previous event and the next event of each warning event in any warning rule can be determined. If the previous event and the next event of each target event in the multiple target events are the same as the previous event and the next event of the corresponding warning event in any warning rule, then the completion order of the multiple target events in the target event stream is determined to be the same as the arrangement order of events in any warning rule in the preset rules. For example, in the target event stream, the previous event of event a is empty, and the next event is event b, the previous event of event b is event a, and the next event is event c, the previous event of event c is b, and the next event is event empty. If in warning rule 1, the previous event of event a is empty, and the next event is event b, the previous event of event b is event a, and the next event is event c, the previous event of event c is b, and the next event is empty, then it can be determined that warning rule 1 is the target warning rule corresponding to the target event stream; or, if in warning rule 2, the previous event of event a is empty, and the next event is event b, the previous event of event b is event a, and the next event is empty, it can be determined that warning rule 2 is also the target warning rule corresponding to the target event stream; but if in warning rule 3, the previous event of event a is empty, and the next event is event b, the previous event of event b is event a, and the next event is event c, the previous event of event c is b, and the next event is not empty, then it can be determined that warning rule 3 is not the target warning rule corresponding to the target event stream.
[0071] By using the above method to determine whether the completion order is consistent for the dependency relationship of each event in the target event stream, it is possible to effectively avoid the waste of data stream resources in the prior art in which one data stream is used for position confirmation for each event, thereby selecting target warning rules.
[0072] In another possible embodiment, after a judgment is made on the target data stream and the corresponding target warning rule is selected, if the target event completed by the target object is received again, the newly added target event can be added to the original target event stream and the determination step of the target warning rule can be re-executed, or, the judgment can be continued based on the newly added target event in the screened warning rules to select the corresponding target warning rule. For example, the original target event stream is three events: event a, event b, and event c. The screened warning rules can include warning rule 1 event a, event b, and event c, and warning rule 2 event a, event b, event c, and event d. The target warning rule finally confirmed is warning rule 1. If the target event d completed by the target object is received again, the target warning rule can be confirmed to be warning rule 2 from the screened warning rules.
[0073] In another possible embodiment, the target warning rule can be determined in real time according to the target event completed by the target object. Whenever the target object completes a target event, a judgment can be made for the target event. If it is the first target event, one or more warning rules whose first event is the same as the first target event can be determined among multiple warning rules, and then the warning rule that matches the subsequent event completed by the target object can be determined from the screened warning rules. After layers of screening, the target warning rule can be determined. In the screening process, it is also necessary to determine whether each screened warning rule contains the possibility of the target event completed by the target object. For example, in one screening, the warning rules include warning rule 1 event a event b event c, and warning rule 2 event a event b event c event d. However, after the target object completes event a, it completes event c, then warning rule 1 and warning rule 2 do not meet the requirements, so it is necessary to re-determine the target event completed by the target object, and it is also necessary to determine the time interval between the newly added target event and the previous event. Even if the two adjacent events are the same, if the time interval between the newly added target event and the previous event exceeds the time interval in the warning rule, it is also necessary to re-determine the target event completed by the target object.
[0074] It should be noted that the multiple warning rules generated in the present application can be stored in the form of a table or in a tree data structure. If it is in the form of a table, each time the target object completes a target event, multiple corresponding warning rules can be screened out from the table, and finally the target warning rule can be determined; if it is in the form of a tree data structure, each time the target object completes a target event, a node in the tree data structure can be determined, thereby determining the target warning rule corresponding to the branch from the leaf node to the root node. Specifically, the present application does not limit the storage form of multiple warning rules.
[0075] In a possible embodiment, after the target warning rule is determined, a corresponding formatted message can be generated for the target warning rule and the target event stream and sent to the corresponding terminal device. For example, if the target warning rule is event a and event c, the generated formatted message can include the first information of the target object, such as the name, ID number and other basic information of the target object, and the target event stream corresponding to the target object, such as completing event a at 8 am and completing event c at 12 noon. It is also possible to determine whether to send the first prompt information or the second prompt information to the terminal device based on the relationship between the urgency of the target warning rule and the first threshold. Figure 3 and Figure 4Schematic diagrams of a first prompt message and a second prompt message provided in an embodiment of the present application are respectively shown. If the urgency of the target warning rule is greater than or equal to the first threshold, a first prompt message is sent to the terminal device, and the first prompt message is used to prompt the user to process the target object. Since the urgency of the target warning rule is relatively large, after receiving the first prompt message, the relevant staff can process the target object according to the processing method contained in the first prompt message, wherein the processing method may include meeting with the target object, etc.; if the urgency of the target warning rule is less than the first threshold, a second prompt message is sent to the terminal device, and the second prompt message is used to prompt the user to warn the target object. Since the urgency of the target warning rule is medium, after receiving the second prompt message, the relevant staff can warn the target object according to the warning method contained in the first prompt message, wherein the warning method may include highlighting events completed by the target object later, so that the relevant staff can focus on the events completed by the target object.
[0076] In one possible embodiment, Figure 5 A specific flow chart of an early warning method provided by an embodiment of the present application is shown as follows: Figure 5 As shown, the method comprises the following steps:
[0077] Step S501, receiving first information, and determining whether the warning indicator in the first information is in the first state, if so, executing step S502; if not, executing step S503.
[0078] Step S502, waiting for the warning indicator of the target object to change to the second state, and re-execute step S501.
[0079] Step S503: setting preset rules for the target object and receiving a plurality of target events completed by the target object.
[0080] Step S504: integrating multiple target events into a target event stream according to different target times.
[0081] Step S505, determining whether the completion order of multiple target events in the target event flow is the same as the arrangement order of events in any preset warning rule, if so, executing step S506; if not, returning to executing step S503.
[0082] Step S506, determining whether the second time intervals between any two adjacent events in the target event stream are both less than or equal to the corresponding first time intervals, if so, executing step S507; if not, returning to executing step S503.
[0083] Step S507: determining a target warning rule based on any warning rule in the above steps.
[0084] Step S508: Acquire the urgency of the target warning rule based on the first relationship table.
[0085] Step S509, determining whether the urgency of the target warning rule is less than the first threshold, if so, executing step S510; if not, executing step S511.
[0086] Step S510: Send a second prompt message to the target terminal device.
[0087] Step S511: Send a first prompt message to the target terminal device.
[0088] Based on the same inventive concept, Figure 6 A structural block diagram of an early warning device provided in an embodiment of the present application, such as Figure 6 As shown, the early warning device 600 may include:
[0089] The target event stream generating unit 601 is used to receive multiple target events completed by the target object; the multiple target events correspond to different target moments;
[0090] Integrate the multiple target events into a target event stream according to the different target moments;
[0091] The target warning rule determination unit 602 is used to determine that if the completion order of multiple target events in the target event stream is determined to be the same as the arrangement order of events in any preset warning rule, and the number of target events in the target event stream is the same as the number of warning events in the same any warning rule, then use any warning rule as the target warning rule; any warning rule is pre-set for the target object; any warning rule includes multiple warning events.
[0092] In a possible implementation manner, the target event stream generating unit 601 is specifically configured to receive first information; the first information includes a warning mark of the target object;
[0093] If the warning mark of the target object is in the first state, wait for the warning mark of the target object to change to the second state; the warning mark in the first state is used to indicate that there is no need to issue a warning for the target object; the warning mark in the second state is used to indicate that a warning is required for the target object;
[0094] If the warning mark of the target object is in the second state, the preset rule is set for the target object, and a plurality of target events completed by the target object are received.
[0095] In a possible implementation, the target event stream generating unit 601 is specifically configured to determine multiple warning rules through the following steps:
[0096] Determining a plurality of warning events corresponding to the target object from a preset event set based on the basic information of the target object;
[0097] Combining any number of warning events from the multiple warning events to obtain multiple combinations;
[0098] Each combination is taken as an independent early warning rule to obtain the plurality of early warning rules.
[0099] In a possible implementation, the target warning rule determination unit 602 is further used to obtain the urgency of the target warning rule based on a first relationship table; the first relationship table is used to characterize the correspondence between the multiple warning rules and the urgency; the first relationship table is established after obtaining the multiple warning rules;
[0100] If it is determined that the urgency is greater than or equal to the first threshold, a first prompt message is sent to the target terminal device; the first prompt message is used to prompt the user to process the target object; the first prompt message includes the first information of the target object, the target event flow and the processing measures for the target object;
[0101] If it is determined that the urgency level is less than the first threshold, a second prompt message is sent to the target terminal device; the second prompt message is used to prompt the user to issue an early warning for the target object; the second prompt message includes the first information of the target object, the target event flow and the early warning measures for the target object.
[0102] In a possible implementation, the target warning rule determination unit 602 is specifically configured to determine a second time interval between any two adjacent events in the target event stream;
[0103] If each second time interval is less than or equal to the corresponding first time interval, any one of the warning rules is used as the target warning rule.
[0104] In a possible implementation, the target warning rule determination unit 602 is specifically configured to determine a previous event and a subsequent event of each target event in the multiple target events, and a previous event and a subsequent event of each warning event in any warning rule;
[0105] If the previous event and the next event of each target event in the multiple target events are the same as the previous event and the next event of the corresponding warning event in any of the warning rules, then the completion order of the multiple target events in the target event stream is determined to be the same as the arrangement order of the events in any of the warning rules in the preset rules.
[0106] In a possible implementation, the target warning rule determination unit 602 is also used to, after taking any of the warning rules as the target warning rule, if a target event completed by the target object is received again, add the newly added target event to the target event stream and re-execute the target warning rule determination step.
[0107] Based on the same inventive concept, the embodiment of the present application provides an electronic device, which can realize the function of the early warning method discussed above, please refer to Figure 7 The electronic device 700 includes a memory 701, a processor 702 and a bus 703.
[0108] The memory 701 is used to store computer programs executed by the processor 702. The memory 701 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system and programs required for running the instant messaging function, etc.; the data storage area may store various instant messaging information and operation instruction sets, etc.
[0109] The memory 701 may be a volatile memory, such as a random-access memory (RAM); the memory 701 may also be a non-volatile memory, such as a read-only memory, a flash memory, a hard disk drive (HDD) or a solid-state drive (SSD), or the memory 701 may be any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory 701 may be a combination of the above memories.
[0110] The processor 702 may include one or more central processing units (CPU) or a digital processing unit, etc. The processor 702 is used to implement the early warning method in the above embodiment when calling the computer program stored in the memory 701 .
[0111] The specific connection medium between the memory 701 and the processor 702 is not limited in the embodiment of the present application. Figure 7In the embodiment, the memory 701 and the processor 702 are connected via a bus 703. The bus 703 is connected to the processor 702 via a bus 703. Figure 7 The connections between other components are shown in bold lines, which are only for illustration and are not intended to be limiting. Bus 703 can be divided into address bus, data bus, control bus, etc. For ease of representation, Figure 7 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.
[0112] Based on the same inventive concept, the embodiment of the present application provides a computer-readable storage medium, and the computer program product includes: computer program code, when the computer program code is run on a computer, the computer executes any of the early warning methods discussed above. Since the principle of solving the problem by the above-mentioned computer-readable storage medium is similar to that of the early warning method, the implementation of the above-mentioned computer-readable storage medium can refer to the implementation of the method, and the repeated parts will not be repeated.
[0113] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-readable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.
[0114] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.
[0115] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0116] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.
[0117] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.
Claims
1. An early warning method, characterized in that: include: Receive multiple target events completed by the target object; The multiple target events correspond to different target moments; Integrate the multiple target events into a target event stream according to the different target moments; If it is determined that the completion order of multiple target events in the target event stream is the same as the arrangement order of events in any preset warning rule, and the number of target events in the target event stream is greater than or equal to the number of warning events in the same any warning rule, then any warning rule will be used as the target warning rule; any warning rule is pre-set for the target object; any warning rule includes multiple warning events.
2. The method according to claim 1, characterized in that The receiving of multiple target events completed by the target object includes: Receiving first information; the first information includes a warning mark of the target object; If the warning mark of the target object is in the first state, wait for the warning mark of the target object to change to the second state; the warning mark in the first state is used to indicate that there is no need to issue a warning for the target object; the warning mark in the second state is used to indicate that a warning is required for the target object; If the warning mark of the target object is in the second state, the preset rule is set for the target object, and a plurality of target events completed by the target object are received.
3. The method according to claim 2, characterized in that The first information also includes basic information of the target object; the method also includes: The following steps are used to determine multiple warning rules: Determining a plurality of warning events corresponding to the target object from a preset event set based on the basic information of the target object; Combining any number of warning events from the multiple warning events to obtain multiple combinations; Each combination is taken as an independent early warning rule to obtain the plurality of early warning rules.
4. The method according to claim 3, characterized in that After taking any of the warning rules as the target warning rule, the method further includes: Acquire the urgency of the target warning rule based on the first relationship table; the first relationship table is used to characterize the correspondence between the multiple warning rules and the urgency; the first relationship table is established after obtaining the multiple warning rules; If it is determined that the urgency is greater than or equal to the first threshold, a first prompt message is sent to the target terminal device; the first prompt message is used to prompt the user to process the target object; the first prompt message includes the first information of the target object, the target event flow and the processing measures for the target object; If it is determined that the urgency level is less than the first threshold, a second prompt message is sent to the target terminal device; the second prompt message is used to prompt the user to issue an early warning for the target object; the second prompt message includes the first information of the target object, the target event flow and the early warning measures for the target object.
5. The method according to claim 1, characterized in that There is also a first time interval between two adjacent warning events in any one of the warning rules; and taking any one of the warning rules as a target warning rule includes: Determine a second time interval between any two adjacent events in the target event stream; If each second time interval is less than or equal to the corresponding first time interval, any one of the warning rules is used as the target warning rule.
6. The method according to claim 1, characterized in that Determine whether the completion order of multiple target events in the target event stream is the same as the arrangement order of events in any warning rule in the preset rules by the following method: If the number of events in any one of the warning rules is the same as the number of multiple target events in the target event stream, then determining the previous event and the next event of each target event in the multiple target events, and the previous event and the next event of each warning event in any one of the warning rules; If the previous event and the next event of each target event in the multiple target events are the same as the previous event and the next event of the corresponding warning event in any of the warning rules, then the completion order of the multiple target events in the target event stream is determined to be the same as the arrangement order of the events in any of the warning rules in the preset rules.
7. The method according to claim 1, characterized in that The method further comprises: After any of the warning rules is used as the target warning rule, if a target event completed by the target object is received again, the newly added target event is added to the target event stream, and the step of determining the target warning rule is re-executed.
8. An early warning device, characterized in that: include: A target event stream generating unit, used for receiving a plurality of target events completed by a target object; The multiple target events correspond to different target moments; Integrate the multiple target events into a target event stream according to the different target moments; A target warning rule determination unit is used to determine that if the completion order of multiple target events in the target event stream is determined to be the same as the arrangement order of events in any preset warning rule, and the number of target events in the target event stream is greater than or equal to the number of warning events in the same any warning rule, then use any warning rule as the target warning rule; any warning rule is pre-set for the target object; and any warning rule includes multiple warning events.
9. An electronic device, characterized in that: include: A memory for storing program instructions; A processor is used to call the program instructions stored in the memory, and execute the steps included in any one of claims 1-7 according to the obtained program instructions.
10. A computer-readable storage medium, wherein a computer program is stored in the computer-readable storage medium, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.
Citation Information
Patent Citations
Event flow pattern matching method and device, storage medium and processor
CN112712125A
Network security information processing method and device, electronic equipment and storage medium
CN114124453A
Service early warning method, device and system
CN115293526A
Association rule analysis method and device based on scene
CN115550134A
Event early warning method and device, electronic equipment and storage medium
CN116976799A
