A data financial security risk analysis system, method and storage medium

Abstract

The present invention discloses a data financial security risk analysis system, method and storage medium, which relate to the technical field of financial data analysis, and include a permission configuration module for configuring corresponding operation permissions for operators; the operators generate operation behaviors within the scope of the operation permissions, and the operation data corresponding to the operation behaviors; the operation data generated by the operators are subjected to correlation analysis to determine the correlation between the operation data, and the operation data are associated and bound based on the correlation between the operation data to obtain an operation data group; the operation data group is analyzed to determine the core operation data of the operators within the scope of the permissions, and the core operation data is encrypted; the present invention confirms and encrypts the core operation data in the financial data, thereby reducing the encryption objects, reducing the amount of encrypted data processing, and improving the reliability and timeliness of data encryption and transmission while ensuring the security of the financial data.

Description

Technical Field

[0001] The present invention relates to the technical field of financial data analysis, and in particular to a data financial security risk analysis system, method and storage medium. Background Art

[0002] The security analysis of financial data is particularly important. In the existing technology, the security analysis of financial data has the following problems: For example, a Chinese invention patent (CN116709308A) discloses a financial data encryption method, device, equipment and storage medium, which specifically discloses: analyzing the communication environment in which the financial data is located to obtain corresponding environmental parameters; obtaining an ideal transmission path for the financial data through the intelligent water drop algorithm according to the corresponding environmental parameters; obtaining a transmission security level for the financial data according to the ideal transmission path; reinforcing the financial data encryption algorithm based on the transmission security level; and encrypting the financial data using the reinforced financial data encryption algorithm; In the process of security analysis and encryption of financial data, all financial data needs to be encrypted, which leads to large system processing volume and increased difficulty. The timeliness of data transmission will also be affected to a certain extent. Therefore, people urgently need a new data financial security risk analysis method to solve the above technical problems. Summary of the invention

[0003] The purpose of the present invention is to provide a data financial security risk analysis system, method and storage medium to solve the problems raised in the prior art.

[0004] To achieve the above purpose, the present invention provides the following technical solution: a data financial security risk analysis method, comprising: A permission configuration module for configuring corresponding operation permissions for operators; The operator generates operating behaviors within the scope of the operating authority, and the operating data corresponding to the operating behaviors; Perform correlation analysis on the operation data generated by the operator to determine the correlation between the operation data, and associate and bind the operation data based on the correlation between the operation data to obtain an operation data group; The operation data group is analyzed, and the core operation data within the operator's authority is determined. The core operation data is encrypted, and the encrypted core operation data and other operation data are packaged and sent to the storage terminal.

[0005] According to the above technical solution, for the correlation analysis of operation data, corresponding operation data is generated through the operator's consistent operation behavior, and the correlation between the operation data is determined based on the change in the impact of the generation of single operation data on the generated operation data. When the correlation between the operation data reaches a set threshold, the operation data is associated and bound to obtain an operation data group.

[0006] According to the above technical solution, the operation data group to be associated and bound is used as the analysis object for determining the core operation data, and the operation data in the operation data group is traversed through function analysis to determine the core operation data.

[0007] According to the above technical solution, the operator's operation behavior within the scope of the operation authority A i The generated operation data is a i , where A represents the Ath operator, i represents the ith operation behavior and the corresponding operation data, the set A of operation behaviors corresponds to the set a of operation data, and the total number of operation behaviors of the operator in a set period is set to n; For the determination of operation data, only quantified operation data is selected to facilitate data analysis later, while non-quantified data is not considered in the scope of operation data because the correlation relationship cannot be determined with non-quantified data. In the design of the scheme of the present invention, only quantified operation data is considered; and the operation data corresponding to each operation behavior is called and confirmed separately before the system runs; When any operation data is generated or changed, a monitoring node is established for the generated operation data to monitor the change amount of the generated operation data and form a collection of the change amount. , , where i represents the i-th operation data a generated or changed i , j represents the jth operation data a generated j , i, j∈n; when When the correlation between the operation data reaches the set threshold , for the operation data a i and operation data a j Perform association binding to form an operation data group , where a i is the independent variable operation data, a j Manipulate data for the dependent variable.

[0008] The monitoring node monitors the change in the amount of generated operation data including the following steps: A1. The monitoring node monitors and records the generated operation data a k ; A2. According to the operation data a kData attributes are used to establish a multi-dimensional direct coordinate system; A3. Operation data a k Positioning in a multidimensional rectangular coordinate system; A4. When any operation data is generated or changed, the monitoring node records the operation data a k Became b k , b k Positioning in a multidimensional rectangular coordinate system; A5. Based on the two positioning points a in the multidimensional rectangular coordinate system k and b k , establish a vector, and calculate the modulus of the vector to obtain the generated operation data a k The amount of change.

[0009] The amount of change can also be determined by graphical comparison, for example: Operational Data k There are six data attributes, then according to the operation data a k The attributes of the standard hexagon are established. When the monitoring node records the operation data a k Became b k When the operation data a k The six attributes of b are used as the standard to establish k Hexagon, and then calculate the operation data a k The hexagon and b k The area difference between the hexagons is used to determine the amount of change.

[0010] According to the above technical solution, the function analysis method includes the following steps: S1, operate data a with independent variable i is the horizontal axis, and the dependent variable is used to operate the data a j Establish a plane rectangular coordinate system for the ordinate; S2, positioning the formed operation data group in the plane rectangular coordinate system, any operation data group forms a coordinate point (a) in the plane rectangular coordinate system i ,a j ); S3, connecting the coordinate points in the plane rectangular coordinate system in pairs to form several groups of piecewise functions F; S4. Determine whether there is a piecewise function F i-j Equal to a i or a j ; if it exists, then a i or a j This is the core operation data. If it does not exist, jump to the next step.

[0011] According to the above technical solution, when determining the core operation data, if there is no piecewise function F i-jEqual to a i or a j ; Then set the threshold Make adjustments or break through operating permissions to form more operating data groups.

[0012] According to the above technical solution, for the breakthrough of operation authority, when any operation data is generated or changed, it establishes a connection with the operation data monitoring nodes under other operation authorities, monitors the change amount of the operation data generated under other operation authorities, and forms a collection of the change amount. , according to the set threshold , forming an operation data group ,in, Indicates operation data a i With operation data a j The amount of change; Then execute steps S1-S4 of the function analysis method to determine the core operation data.

[0013] A data financial security risk analysis system, the system comprising an authority configuration module, an operation recording module, a correlation analysis module, a core operation data determination module and an encryption sending module; The permission configuration module is used to configure corresponding operation permissions for operators; the operation recording module is used to record the operation behavior of operators and the operation data generated corresponding to the operation behavior; the association analysis module is used to analyze the correlation between the generated operation data, and associate and bind the operation data with correlation to form an operation data group; the core operation data determination module is used to analyze the operation data group formed by the association analysis module to determine the core operation data; the encryption and sending module is used to encrypt the determined core operation data, and package the operation data formed by the operator within the scope of the operation permission, and send it to the storage terminal.

[0014] According to the above technical solution, the association analysis module includes a monitoring node unit, a threshold setting unit and a correlation judgment unit; The monitoring node unit is used to establish a monitoring node for the generated operation data, and monitor the change amount of the generated operation data; the threshold setting unit is used to set and adjust the association binding threshold of the change amount of the operation data; the association judgment unit is used to judge whether the operation data meets the threshold setting, and associate and bind the operation data that meets the threshold setting; The core operation data determination module includes a coordinate system establishment unit, a piecewise function determination unit, a data comparison unit and a data group expansion unit; The coordinate system establishment unit is used to establish a plane rectangular coordinate system based on the operation data group; the piecewise function determination unit is used to connect the coordinate points formed by each operation data group in the plane rectangular coordinate system in pairs to form a piecewise function; the data comparison unit is used to compare the piecewise function with the operation data to determine whether there is core operation data; the data group expansion unit is used to form more operation data groups by adjusting the set threshold or breaking through the operation authority when the data comparison unit determines that there is no core operation data.

[0015] A readable storage medium stores a computer program, which, when executed on a processor, implements the data financial security risk analysis method.

[0016] Compared with the prior art, the present invention has the following beneficial effects: the present invention generates operation data through the operation behavior of the operator, and performs correlation analysis on the operation data and determines the core operation data, so that after the operator completes the operation behavior in a cycle, the core operation data can be encrypted and the operation data generated by the operation behavior in a cycle can be sent to the storage terminal for storage; During the entire process, through data analysis, only the core operation data is encrypted instead of all operation data, which greatly reduces the amount of data encryption processing and the amount of data sent. This reduces the amount of encrypted data in the system and improves the timeliness and security of data sending, making the generation and sending of financial data less risky. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 This is a schematic diagram of the module composition of a data financial security risk analysis system of the present invention; Figure 2 This is a schematic diagram of an example of determining core operation data of a data financial security risk analysis method of the present invention; Figure 3 This is a schematic diagram of determining the amount of change using a graphic comparison method in a data financial security risk analysis method of the present invention. DETAILED DESCRIPTION

[0018] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0019] Embodiment 1: The present invention provides a data financial security risk analysis method, comprising: A permission configuration module is used to configure corresponding operation permissions for operators; the configuration of operation permissions is to ensure the security of financial data so that operators can only operate on financial data within the scope of permissions. At the same time, it is also to facilitate the preparation for data analysis beyond the scope of permissions in the later stage, because the analysis of data within the same permission scope and data beyond the scope of permissions is different, which can further ensure the stability of data security analysis.

[0020] The operator generates operating behaviors within the scope of the operating authority, and the operating data corresponding to the operating behaviors; For the correlation analysis of operation data, the corresponding operation data is generated through the operator's consistent operation behavior, and the correlation between the operation data is determined based on the change in the impact of the generation of a single operation data on the generated operation data. Because when the latter operation data is generated, if there is a correlation between the previous operation data and the latter operation data, the previous operation data will change with the generation of the latter operation data. When the correlation between the operation data reaches the set threshold, the operation data is associated and bound to obtain an operation data group.

[0021] The operator's operation behavior within the scope of operation authority A i The generated operation data is a i , where A represents the Ath operator, i represents the ith operation behavior and the corresponding operation data, the set A of operation behaviors corresponds to the set a of operation data, and the total number of operation behaviors of the operator in a set period is set to n; For the determination of operation data, only quantified operation data is selected to facilitate data analysis later, while non-quantified data is not considered in the scope of operation data because the correlation relationship cannot be determined with non-quantified data. In the design of the scheme of the present invention, only quantified operation data is considered; and the operation data corresponding to each operation behavior is called and confirmed separately before the system runs; When any operation data is generated or changed, a monitoring node is established for the generated operation data to monitor the change amount of the generated operation data and form a collection of the change amount. , , where i represents the i-th operation data a generated or changed i , j represents the jth operation data a generated j , i, j∈n; when When the correlation between the operation data reaches the set threshold , for the operation data a i and operation data a j Perform association binding to form an operation data group , where a iis the independent variable operation data, a j Manipulate data for the dependent variable.

[0022] In this process, the threshold is set , so that the change in operation data needs to reach a certain level before association binding is performed, raising the threshold for financial data security analysis, rather than association binding as long as there is a change. This can reduce the system's computing power and improve computing speed and accuracy when confirming core operation data in the later stage.

[0023] In this embodiment, the monitoring node monitors the change amount of the generated operation data including the following steps: A1. The monitoring node monitors and records the generated operation data a k ; A2. According to the operation data a k Data attributes are used to establish a multi-dimensional direct coordinate system; A3. Operation data a k Positioning in a multidimensional rectangular coordinate system; A4. When any operation data is generated or changed, the monitoring node records the operation data a k Became b k , b k Positioning in a multidimensional rectangular coordinate system; A5. Based on the two positioning points a in the multidimensional rectangular coordinate system k and b k , establish a vector, and calculate the modulus of the vector to obtain the generated operation data a k The amount of change.

[0024] like Figure 2 As shown, the change can also be determined by graphical comparison, for example: Operational Data k There are six data attributes, then according to the operation data a k The attributes of the standard hexagon are established. When the monitoring node records the operation data a k Became b k When the operation data a k The six attributes of b are used as the standard to establish k Hexagon, and then calculate the operation data a k The hexagon and b k The area difference between the hexagons is used to determine the amount of change.

[0025] The associated and bound operation data group is used as the analysis object for determining the core operation data. The operation data in the operation data group is traversed through function analysis to determine the core operation data. The core operation data is encrypted and the encrypted core operation data and other operation data are packaged and sent to the storage terminal.

[0026] like Figure 3 As shown, the function analysis method includes the following steps: S1, operate data a with independent variable i is the horizontal axis, and the dependent variable is used to operate the data a j Establish a plane rectangular coordinate system for the ordinate; S2, positioning the formed operation data group in the plane rectangular coordinate system, any operation data group forms a coordinate point (a) in the plane rectangular coordinate system i ,a j ); S3, connecting the coordinate points in the plane rectangular coordinate system in pairs to form several groups of piecewise functions F; S4. Determine whether there is a piecewise function F i-j Equal to a i or a j ; if it exists, then a i or a j is the core operation data. If it does not exist, jump to the next step, where F i-j Indicates operation data a i With operation data a j The piecewise function formed between them in the rectangular coordinate system.

[0027] In the present application, the core operation data is determined by the above-mentioned function analysis method, so that the analysis can be more intuitive and objective, and it is also easier to provide the basis for determining the core operation data in a digital way, so that the determination of the core operation data is traceable. In addition, the present application determines the core operation data so that only the core operation data needs to be encrypted. After the core operation data is determined, the data is the core of the operation data generated within a cycle. As long as the encryption of the core operation data is not cracked, the operation data generated within the entire cycle will not be maliciously known, thereby ensuring the security of the financial data.

[0028] S5. When determining the core operation data, if there is no piecewise function F i-j Equal to a i or a j ; then set the threshold Make adjustments or break through operating permissions to form more operating data groups.

[0029] In this embodiment, for example, the threshold value is set The operation data is reduced so that more operation data groups are generated within the scope of the operator's operation authority, or the operation data of operator A's existing operation authority is analyzed for correlation with the operation data generated by operators with other operation authorities to form an operation data group, and then the core operation data is determined according to steps S1-S4 until the core operation data is found.

[0030] In this embodiment, for the breakthrough of operation authority, when any operation data is generated or changed, a connection is established with the operation data monitoring nodes under other operation authorities to monitor the change amount of the operation data generated under other operation authorities and form a collection of the change amount. The variation here is different from the above variation. The representation makes it possible to distinguish between analysis within the scope of authority and analysis beyond the scope of authority, ensuring the normal operation of the system. , forming an operation data group ,in, Indicates operation data a i With operation data a j The amount of change; Then execute steps S1-S4 of the function analysis method to determine the core operation data.

[0031] Embodiment 2: The set of operation behaviors of the operator within the scope of the operation authority is A={A1,A2,A3,A4,A5,A6,A7}, and the set of corresponding operation data is a={a1,a2,a3,a4,a5,a6,a7}. The total number of operation behaviors of the operator within a set period is set to 7; When operation behavior A1 occurs, a monitoring node is established for operation data a1 corresponding to operation behavior A1, and the change amount of operation data a1 is monitored; During the entire operation process of the operator, when operation behavior A3 is implemented, operation data a3 is generated, and operation data a2 generates a change When the operation behavior A6 is implemented, the operation data a6 is generated, and the operation data a4 generates a change When the operation behavior A7 is implemented, the operation data a7 is generated, and the operation data a2 generates a change ; in, , and Are greater than or equal to the set threshold , associate and bind the operation data a3 and the operation data a2 to form an operation data group , associate and bind the operation data a6 and the operation data a4 to form an operation data group , associate and bind the operation data a7 and the operation data a2 to form an operation data group .

[0032] The associated and bound operation data group is used as the analysis object for determining the core operation data. The operation data in the operation data group is traversed through function analysis to determine the core operation data. The core operation data is encrypted and the encrypted core operation data and other operation data are packaged and sent to the storage terminal.

[0033] The function analysis method includes the following steps: S1, operate data a with independent variable i is the horizontal axis, and the dependent variable is used to operate the data a j Establish a plane rectangular coordinate system for the ordinate; S2, positioning the formed operation data group in a plane rectangular coordinate system, the operation data group forms coordinate points (a3, a2), (a6, a4) and (a7, a2) in the plane rectangular coordinate system; S3, connect the coordinate points in the plane rectangular coordinate system in pairs to form three sets of piecewise functions; S4. There exists a piecewise function F equal to a2; then a2 is the core operation data.

[0034] Example 3: Figure 1 As shown, a data financial security risk analysis system includes an authority configuration module, an operation recording module, a correlation analysis module, a core operation data determination module and an encryption sending module; The authority configuration module is used to configure corresponding operation permissions for operators; the operation recording module is used to record the operation behavior of operators and the operation data generated corresponding to the operation behavior; the association analysis module is used to analyze the association between the generated operation data, and associate and bind the operation data with association to form an operation data group; The association analysis module includes a monitoring node unit, a threshold setting unit and a correlation judgment unit; The monitoring node unit is used to establish a monitoring node for the generated operation data, and monitor the change amount of the generated operation data; the threshold setting unit is used to set and adjust the association binding threshold of the change amount of the operation data; the association judgment unit is used to judge whether the operation data meets the threshold setting, and associate and bind the operation data that meets the threshold setting; The core operation data determination module is used to analyze the operation data group formed by the association analysis module to determine the core operation data; The core operation data determination module includes a coordinate system establishment unit, a piecewise function determination unit, a data comparison unit and a data group expansion unit; The coordinate system establishment unit is used to establish a plane rectangular coordinate system based on the operation data group; the piecewise function determination unit is used to connect the coordinate points formed by each operation data group in the plane rectangular coordinate system in pairs to form a piecewise function; the data comparison unit is used to compare the piecewise function with the operation data to determine whether there is core operation data; the data group expansion unit is used to form more operation data groups by adjusting the set threshold or breaking through the operation authority when the data comparison unit determines that there is no core operation data.

[0035] The encryption sending module is used to encrypt the determined core operation data, and to package the operation data formed by the operator within the scope of the operation authority, and send it to the storage terminal.

[0036] Embodiment 4: A readable storage medium stores a computer program, which, when executed on a processor, implements the data financial security risk analysis method.

[0037] It will be apparent to those skilled in the art that the present invention is not limited to the details of the exemplary embodiments described above and that the present invention can be implemented in other specific forms without departing from the spirit or essential features of the present invention. Therefore, the embodiments should be considered exemplary and non-restrictive in all respects, and the scope of the present invention is defined by the appended claims rather than the above description, and it is intended that all changes falling within the meaning and scope of the equivalent elements of the claims be included in the present invention.

Claims

1. A data financial security risk analysis method, characterized in that: include: A permission configuration module for configuring corresponding operation permissions for operators; The operator generates operating behaviors within the scope of the operating authority, and the operating data corresponding to the operating behaviors; Perform correlation analysis on the operation data generated by the operator to determine the correlation between the operation data, and associate and bind the operation data based on the correlation between the operation data to obtain an operation data group; The operation data group is analyzed, and the core operation data within the operator's authority is determined. The core operation data is encrypted, and the encrypted core operation data and other operation data are packaged and sent to the storage terminal.

2. A data financial security risk analysis method according to claim 1, characterized in that: For the correlation analysis of operation data, the corresponding operation data is generated through the operator's consistent operation behavior, and the correlation between the operation data is determined based on the impact of the generation of single operation data on the generated operation data. When the correlation between the operation data reaches the set threshold, the operation data is associated and bound to obtain an operation data group.

3. A data financial security risk analysis method according to claim 2, characterized in that: The operation data group to be associated and bound is used as an analysis object for determining the core operation data, and the operation data in the operation data group is traversed through a function analysis method to determine the core operation data.

4. A data financial security risk analysis method according to claim 3, characterized in that: The operator's operation behavior within the scope of operation authority A i The generated operation data is a i , where A represents the Ath operator, i represents the ith operation behavior and the corresponding operation data, the set A of operation behaviors corresponds to the set a of operation data, and the total number of operation behaviors of the operator in a set period is set to n; When any operation data is generated or changed, a monitoring node is established for the generated operation data to monitor the change amount of the generated operation data and form a collection of the change amount. , , where i represents the i-th operation data a generated or changed i , j represents the jth operation data a generated j , i, j∈n; when When the correlation between the operation data reaches the set threshold , for the operation data a i and operation data a j Perform association binding to form an operation data group , where a i is the independent variable operation data, a j Manipulate data for the dependent variable.

5. A data financial security risk analysis method according to claim 4, characterized in that: The function analysis method includes the following steps: S1, operate data a with independent variable i is the horizontal axis, and the dependent variable is used to operate the data a j Establish a plane rectangular coordinate system for the ordinate; S2, positioning the formed operation data group in the plane rectangular coordinate system, any operation data group forms a coordinate point (a) in the plane rectangular coordinate system i ,a j ); S3, connecting the coordinate points in the plane rectangular coordinate system in pairs to form several groups of piecewise functions F; S4. Determine whether there is a piecewise function F i-j Equal to a i or a j ; if it exists, then a i or a j is the core operation data. If it does not exist, jump to the next step, where F i-j Indicates operation data a i With operation data a j The piecewise function formed between them in the rectangular coordinate system.

6. A data financial security risk analysis method according to claim 5, characterized in that: When determining the core operation data, if there is no piecewise function F i-j Equal to a i or a j ; Then set the threshold Make adjustments or break through operating permissions to form more operating data groups.

7. A data financial security risk analysis method according to claim 6, characterized in that: For the breakthrough of operation authority, when any operation data is generated or changed, it establishes a connection with the operation data monitoring nodes under other operation authorities, monitors the change amount of the operation data generated under other operation authorities, and forms a collection of the change amount. , according to the set threshold , forming an operation data group ,in, Indicates operation data a i With operation data a j The amount of change; Then execute steps S1-S4 of the function analysis method to determine the core operation data.

8. A data financial security risk analysis system for executing the data financial security risk analysis method according to any one of claims 1 to 7, characterized in that: The system includes a permission configuration module, an operation recording module, a correlation analysis module, a core operation data determination module and an encryption sending module; The permission configuration module is used to configure corresponding operation permissions for operators; the operation recording module is used to record the operation behavior of operators and the operation data generated corresponding to the operation behavior; The association analysis module is used to analyze the association between the generated operation data, and to associate and bind the associated operation data to form an operation data group; the core operation data determination module is used to analyze the operation data group formed by the association analysis module to determine the core operation data; the encryption and sending module is used to encrypt the determined core operation data, and to package the operation data formed by the operator within the scope of the operation authority and send it to the storage terminal.

9. The data financial security risk analysis system according to claim 8, characterized in that: The association analysis module includes a monitoring node unit, a threshold setting unit and a correlation judgment unit; The monitoring node unit is used to establish a monitoring node for the generated operation data, and monitor the change amount of the generated operation data; The threshold setting unit is used to set and adjust the associated binding threshold of the change amount of the operation data; the association judgment unit is used to judge whether the operation data meets the threshold setting, and associate and bind the operation data that meets the threshold setting; The core operation data determination module includes a coordinate system establishment unit, a piecewise function determination unit, a data comparison unit and a data group expansion unit; The coordinate system establishment unit is used to establish a plane rectangular coordinate system based on the operation data group; the piecewise function determination unit is used to connect the coordinate points formed by each operation data group in the plane rectangular coordinate system in pairs to form a piecewise function; the data comparison unit is used to compare the piecewise function with the operation data to determine whether there is core operation data; the data group expansion unit is used to form more operation data groups by adjusting the set threshold or breaking through the operation authority when the data comparison unit determines that there is no core operation data.

10. A readable storage medium, characterized in that: It stores a computer program, which, when executed on a processor, implements the data financial security risk analysis method as described in any one of claims 1-7.

Images