A data financial security risk analysis system, method and storage medium

Abstract

The present invention discloses a data financial security risk analysis system, method and storage medium, relating to the technical field of financial data analysis, including a permission configuration module for configuring corresponding operation permissions for operators; operators generate operation behaviors within the scope of operation permissions, as well as operation data corresponding to the operation behaviors; perform correlation analysis on the operation data generated by the operators, determine the correlation between the operation data, and based on the correlation between the operation data, perform correlation binding on the operation data to obtain an operation data group; analyze the operation data group, determine the core operation data of the operator within the scope of permissions, and perform encryption processing on the core operation data; by confirming and encrypting the core operation data in financial data, the present invention can, while ensuring the security of financial data, reduce the encryption objects, reduce the amount of encrypted data processing, and improve the reliability and timeliness of data encryption and transmission.

Description

Technical Field

[0001] The present invention relates to the technical field of financial data analysis, and specifically to a data financial security risk analysis system, method and storage medium. Background Art

[0002] The security analysis of financial data is particularly important. In the prior art, there are the following problems in the security analysis of financial data:

[0003] For example: Chinese Invention Patent (CN116709308A) discloses a financial data encryption method, device, equipment and storage medium, which specifically discloses: analyzing the communication environment where the financial data is located to obtain corresponding environmental parameters; according to the corresponding environmental parameters, obtaining the ideal transmission path of the financial data through the intelligent water drop algorithm; according to the ideal transmission path, obtaining the transmission security level of the financial data; based on the transmission security level, strengthening the financial data encryption algorithm; using the strengthened financial data encryption algorithm to encrypt the financial data;

[0004] In this security analysis and encryption process of financial data, it is necessary to encrypt all financial data, resulting in a large system processing volume, increased difficulty, and the timeliness of data transmission will also be affected to a certain extent. Therefore, people urgently need a new data financial security risk analysis method to solve the above technical problems. Summary of the Invention

[0005] The purpose of the present invention is to provide a data financial security risk analysis system, method and storage medium to solve the problems raised in the prior art.

[0006] To achieve the above purpose, the present invention provides the following technical solution: A data financial security risk analysis method, including:

[0007] A permission configuration module for configuring corresponding operation permissions for operators;

[0008] The operator generates an operation behavior and corresponding operation data within the scope of the operation permission;

[0009] Perform a correlation analysis on the operation data generated by the operator, determine the correlation between the operation data, and based on the correlation between the operation data, perform an association binding on the operation data to obtain an operation data group;

[0010] Analyze the operation data group, determine the core operation data of the operator within the scope of the permission, encrypt the core operation data, and package and send the encrypted core operation data and other operation data to the storage terminal.

[0011] According to the above technical solution, for the correlation analysis of operation data, corresponding operation data is generated through the coherent operation behavior of the operator. Based on the influence change of the generated operation data caused by the generation of a single operation data, the correlation between operation data is determined. When the correlation between operation data reaches the set threshold, the operation data is associated and bound to obtain an operation data group.

[0012] According to the above technical solution, the operation data group subjected to association and binding is used as the analysis object for determining the core operation data. The operation data in the operation data group is traversed through a function analysis method to determine the core operation data.

[0013] According to the above technical solution, the operation behavior A of the operator within the operation authority i generates operation data a i , where A i represents the i-th operation behavior of the A-th operator. The set of operation behaviors corresponds to the set of operation data. The total amount of operation behaviors of the operator within a set period is set to n;

[0014] For the determination of operation data, only quantified operation data is selected to facilitate subsequent data analysis. Non-quantified data is not within the scope of consideration of operation data because the association relationship cannot be determined for non-quantified data. In the scheme design of the present invention, only quantified operation data is considered; and for the operation data corresponding to each operation behavior, separate calls and confirmations are performed before the system runs;

[0015] When any operation data is generated or changed, a monitoring node is established for the generated operation data to monitor the change amount of the generated operation data, forming a set of change amounts Δ, Δ = {Δ i-j}, where i represents the i-th operation data a i that is generated or changed, and j represents the j-th operation data a j that has been generated, and i, j ∈ n;

[0016] When Δ i-j ≥σ, it is determined that the correlation between operation data reaches the set threshold σ, and the operation data a i and the operation data a j are associated and bound to form an operation data group [a i , a j , Δ i-j , where a i is the independent variable operation data, and a j is the dependent variable operation data.

[0017] The monitoring of the change amount of the generated operation data by the monitoring node includes the following steps:

[0018] A1. The monitoring node monitors and records the generated operation data a k ;

[0019] A2. According to the data attributes of the operation data a k , a multi-dimensional direct coordinate system is established;

[0020] A3. Locate the operation data a k in the multi-dimensional rectangular coordinate system;

[0021] A4. When any operation data is generated or changed, the monitoring node records that the operation data a k has become b k , and locate b k in the multi-dimensional rectangular coordinate system;

[0022] A5. Based on the two located points a k and b k in the multi-dimensional rectangular coordinate system, establish a vector and calculate the modulus of the vector to obtain the change amount of the generated operation data a k .

[0023] The change amount can also be determined by the graphic comparison method. For example:

[0024] If the operation data a k has six data attributes, a standard hexagon is established according to the attributes of the operation data a k . When the monitoring node records that the operation data a k has become b k , a hexagon of b k is established with the six attributes of the operation data a k as the standard. Then, calculate the area difference between the hexagon of the operation data a k and the hexagon of b k to determine the change amount.

[0025] According to the above technical solution, the function analysis method includes the following steps:

[0026] S1. Taking the independent variable operation data a i as the abscissa and the dependent variable operation data a j as the ordinate, establish a plane rectangular coordinate system;

[0027] S2. Locate the formed operation data group in the plane rectangular coordinate system. Any operation data group forms a coordinate point (a i , a j ) in the plane rectangular coordinate system;

[0028] S3. Connect the coordinate points in the plane rectangular coordinate system in pairs to form several piecewise functions F;

[0029] S4. Determine whether there is a piecewise function F i-j equal to a i or a j ; if it exists, then a i or a j is the core operation data. If it does not exist, jump to the next step.

[0030] According to the above technical solution, when determining the core operation data, if there is no piecewise function F i-j equal to a i or a j ;

[0031] then adjust the set threshold σ or break the operation authority to form more operation data groups.

[0032] According to the above technical solution, for breaking through the operation authority, when any operation data is generated or changed, establish a connection with the operation data monitoring nodes under other operation authorities, monitor the change amount of the operation data that has been generated under other operation authorities, and form a set of change amounts According to the set threshold σ, form operation data groups wherein, represents the change amount of operation data a i and operation data a j ;

[0033] Then execute steps S1 - S4 of the function analysis method to determine the core operation data.

[0034] A data financial security risk analysis system, the system includes a permission configuration module, an operation record module, an association analysis module, a core operation data determination module, and an encryption and sending module;

[0035] The permission configuration module is used to configure corresponding operation permissions for operators; the operation record module is used to record the operation behaviors of operators and the operation data generated by the operation behaviors; the association analysis module is used to analyze the relevance between the generated operation data, and perform association binding on the relevant operation data to form operation data groups; the core operation data determination module is used to analyze the operation data groups formed by the association analysis module to determine the core operation data; the encryption and sending module is used to encrypt the determined core operation data, and package the operation data formed by the operator within the operation permission range, and send it to the storage terminal.

[0036] According to the above technical solution, the association analysis module includes a monitoring node unit, a threshold setting unit, and a relevance judgment unit;

[0037] The monitoring node unit is used to establish monitoring nodes for the generated operation data and monitor the change amount of the generated operation data; the threshold setting unit is used to set and adjust the correlation binding threshold of the operation data change amount; the correlation judgment unit is used to judge whether the operation data conforms to the threshold setting and perform correlation binding on the operation data that conforms to the threshold setting;

[0038] The core operation data determination module includes a coordinate system establishment unit, a piecewise function determination unit, a data comparison unit, and a data group expansion unit;

[0039] The coordinate system establishment unit is used to establish a plane rectangular coordinate system according to the operation data group; the piecewise function determination unit is used to connect the coordinate points formed by each operation data group in the plane rectangular coordinate system in pairs to form a piecewise function; the data comparison unit is used to compare the piecewise function with the operation data to determine whether there is core operation data; the data group expansion unit is used to, when the data comparison unit determines that there is no core operation data, form more operation data groups by adjusting the set threshold or breaking through the operation authority.

[0040] A readable storage medium stores a computer program, and when the computer program is executed on a processor, the data financial security risk analysis method described above is implemented.

[0041] Compared with the prior art, the beneficial effects of the present invention are as follows: The present invention generates operation data through the operation behavior of an operator, and performs correlation analysis on the operation data and determines the core operation data, so that after the operator completes an operation behavior cycle, the core operation data can be encrypted, and the operation data generated by the operation behavior in one cycle is sent to a storage terminal for storage;

[0042] In the whole process, through data analysis, only the core operation data is encrypted, rather than all the operation data, which greatly reduces the amount of data encryption processing, and the data transmission volume also decreases accordingly, reducing the encrypted data volume of the system, and at the same time improving the timeliness and security of data transmission, making the generation and transmission risks of financial data lower. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 It is a schematic diagram of the module composition of a data financial security risk analysis system of the present invention;

[0044] Figure 2 It is a schematic diagram of an example for determining core operation data of a data financial security risk analysis method of the present invention;

[0045] Figure 3Schematic diagram for determining the change amount by the graphical comparison method of a data financial security risk analysis method of the present invention. Detailed implementation manners

[0046] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0047] Embodiment 1: The present invention provides a data financial security risk analysis method, including:

[0048] A permission configuration module for configuring corresponding operation permissions for operators; the configuration of operation permissions is to ensure the security of financial data, so that operators can only operate on financial data within the scope of their permissions. At the same time, it is also to prepare for subsequent data analysis beyond the scope of permissions, because the data analysis within the same permission scope and beyond the permission scope is different, which can further ensure the stability of data security analysis.

[0049] Operators generate operation behaviors and corresponding operation data within the scope of operation permissions;

[0050] For the correlation analysis of operation data, corresponding operation data is generated through the coherent operation behaviors of operators. The correlation between operation data is determined based on the influence change of the generated operation data on the already generated operation data. Because when the latter operation data is generated, if there is a correlation between the former operation data and the latter operation data, the former operation data will change with the generation of the latter operation data. When the correlation between operation data reaches the set threshold, the operation data is associated and bound to obtain an operation data group.

[0051] Operation behavior A of the operator within the scope of operation permissions i The generated operation data is a i , where A i represents the i-th operation behavior of the A-th operator, and the set of operation behaviors corresponds to the set of operation data. The total amount of operation behaviors of an operator within a set period is set to n;

[0052] For the determination of operation data, only quantified operation data is selected for facilitating subsequent data analysis, while non-quantified data is not within the scope of consideration for operation data because the correlation relationship cannot be determined for non-quantified data. In the design of the solution of the present invention, only quantified operation data is considered; and for the operation data corresponding to each operation behavior, separate calls and confirmations are made before the system runs.

[0053] When any operation data is generated or changed, a monitoring node is established for the generated operation data to monitor the change amount of the generated operation data, forming a set Δ of change amounts, Δ = {Δ i-j}, where i represents the i-th operation data a i that is generated or changed, and j represents the j-th operation data a j that has been generated, and i, j ∈ n;

[0054] When Δ i-j ≥σ, it is determined that the correlation between the operation data reaches the set threshold σ, and the operation data a i and the operation data a j are associated and bound to form an operation data group [a i , a j , Δ i-j , where a i is the independent variable operation data and a j is the dependent variable operation data.

[0055] In this process, the threshold σ is set so that the change amount of the operation data needs to reach a certain degree before association and binding are performed, raising the threshold for financial data security analysis, rather than performing association and binding as long as a change amount is generated. This enables reducing the computing amount of the system and improving the computing speed and accuracy when confirming the core operation data later.

[0056] In this embodiment, the monitoring of the change amount of the generated operation data by the monitoring node includes the following steps:

[0057] A1. The monitoring node monitors and records the generated operation data a k ;

[0058] A2. According to the data attributes of the operation data a k , a multi-dimensional direct coordinate system is established;

[0059] A3. The operation data a k is located in the multi-dimensional rectangular coordinate system;

[0060] A4. When any operation data is generated or changed, the monitoring node records that the operation data a k has become b k , and b kLocated in a multi-dimensional rectangular coordinate system;

[0061] A5. Based on two positioning points a k and b k in the multi-dimensional rectangular coordinate system, establish a vector and calculate the modulus of the vector to obtain the change amount of the generated operation data a k .

[0062] As Figure 2 shown, the change amount can also be determined by the graphical comparison method. For example:

[0063] If the operation data a k has six data attributes, a standard hexagon is established based on the attributes of the operation data a k . When the monitoring node records that the operation data a k becomes b k , a hexagon of b k is established with the six attributes of the operation data a k as the standard. Then, calculate the area difference between the hexagon of the operation data a k and the hexagon of b k to determine the change amount.

[0064] Take the operation data group to be associated and bound as the analysis object for determining the core operation data. Traverse the operation data in the operation data group through the function analysis method to determine the core operation data, encrypt the core operation data, and package and send the encrypted core operation data and other operation data to the storage terminal.

[0065] As Figure 3 shown, the function analysis method includes the following steps:

[0066] S1. Establish a plane rectangular coordinate system with the independent variable operation data a i as the abscissa and the dependent variable operation data a j as the ordinate;

[0067] S2. Locate the formed operation data group in the plane rectangular coordinate system. Any operation data group forms a coordinate point (a i , a j ) in the plane rectangular coordinate system;

[0068] S3. Connect the coordinate points in the plane rectangular coordinate system in pairs to form several piecewise functions F;

[0069] S4. Determine whether there exists a piecewise function F i-j equal to a i or a j ; if it exists, then a i or a jAs the core operation data, if it does not exist, jump to the next step, where F i-j represents the operation data a i and the operation data a j form a piecewise function in the plane rectangular coordinate system.

[0070] In this application, the core operation data is determined through the above function analysis method, which enables more intuitive and objective analysis, and it is also easier to give the basis for determining the core operation data in a digital way, making the determination of the core operation data traceable. Moreover, through the determination of the core operation data in this application, only the core operation data needs to be encrypted. Because after the core operation data is determined, this data is the core of the operation data generated within a period. As long as the encryption of the core operation data is not cracked, the operation data generated throughout the period will not be maliciously obtained, ensuring the security of financial data.

[0071] S5. When determining the core operation data, if the piecewise function F i-j is equal to a i or a j ; then adjust the set threshold σ or break through the operation authority to form more operation data groups.

[0072] In this embodiment, for example: reduce the set threshold σ so that more operation data groups are generated within the operation authority of the operator, or perform a correlation analysis on the operation data of the existing operation authority of operator A and the operation data generated by other operators with different operation authorities to form operation data groups, and then determine the core operation data according to the steps of S1 - S4 until the core operation data is found.

[0073] In this embodiment, for breaking through the operation authority, when any operation data is generated or changed, establish a connection with the operation data monitoring nodes under other operation authorities, monitor the change amount of the operation data that has been generated under other operation authorities, and form a set of change amounts The change amount here is represented differently from the previous change amount Δ, which enables the distinction between the analysis within the authority range and the analysis beyond the authority range, ensuring the normal operation of the system. According to the set threshold σ, form operation data groups Among them, represents the operation data a i and the operation data a j of the change amount;

[0074] Then execute the steps of S1 - S4 of the function analysis method to determine the core operation data.

[0075] Embodiment 2:

[0076] The set of operation behaviors of the operator within the scope of the operation authority A={A 1 ,A 2 ,A 3 ,A 4 ,A 5 ,A 6 ,A 7}, corresponding to the set of operation data a = {a 1 ,a 2 ,a 3 ,a 4 ,a 5 ,a 6 ,a 7}, the total number of operation behaviors of the operator in a set cycle is set to 7;

[0077] When the operation behavior A 1 When generated, the operation behavior A 1 Corresponding operation data a 1 Establish a monitoring node to operate data a 1 Monitor the changes in

[0078] During the entire operation process of the operator, when the operation behavior A 3 When implemented, operation data a is generated 3 , operation data a 2 The change Δ 3-2 , when operation behavior A 6 When implementing the embodiment, operation data a is generated 6 , operation data a 4 The change Δ 6-4 , when operation behavior A 7 When implementing the embodiment, operation data a is generated 7 , operation data a 2 The change Δ 7-2 ;

[0079] Among them, Δ 3-2 , Δ 6-4 and Δ 7-2 are greater than or equal to the set threshold σ, for the operation data a 3 and operation data a 2 Perform association binding to form an operation data group [a 3 ,a 2 ,Δ 3-2 ], for the operation data a 6 and operation data a 4 Perform association binding to form an operation data group [a 6 ,a 4 ,Δ 6-4 ], for the operation data a 7And operation data a 2 Perform associated binding to form an operation data group [a 7 , a 2 , Δ 7-2 .

[0080] Take the operation data group after associated binding as the analysis object for determining the core operation data. Traverse the operation data in the operation data group through the function analysis method to determine the core operation data, perform encryption processing on the core operation data, and package and send the encrypted core operation data and other operation data to the storage terminal.

[0081] The function analysis method includes the following steps:

[0082] S1. Use the independent variable operation data a i as the abscissa and the dependent variable operation data a j as the ordinate to establish a plane rectangular coordinate system;

[0083] S2. Locate the formed operation data group in the plane rectangular coordinate system. The operation data group forms coordinate points (a 3 , a 2 ), (a 6 , a 4 ) and (a 7 , a 2 ) in the plane rectangular coordinate system;

[0084] S3. Connect the coordinate points in the plane rectangular coordinate system in pairs to form three piecewise functions;

[0085] S4. If there is a piecewise function F equal to a 2 ; then a 2 is the core operation data.

[0086] Embodiment 3: As Figure 1 shown, a data financial security risk analysis system, the system includes a permission configuration module, an operation record module, an association analysis module, a core operation data determination module, and an encryption and sending module;

[0087] The permission configuration module is used to configure corresponding operation permissions for operators; the operation record module is used to record the operation behaviors of operators and the operation data generated by the operation behaviors; the association analysis module is used to analyze the association between the generated operation data and perform associated binding on the associated operation data to form an operation data group;

[0088] The association analysis module includes a monitoring node unit, a threshold setting unit, and an association judgment unit;

[0089] The monitoring node unit is used to establish monitoring nodes for the generated operation data and monitor the change amount of the generated operation data; the threshold setting unit is used to set and adjust the associated binding threshold of the operation data change amount; the relevance judgment unit is used to judge whether the operation data conforms to the threshold setting and perform associated binding on the operation data that conforms to the threshold setting;

[0090] The core operation data determination module is used to analyze the operation data group formed by the association analysis module and determine the core operation data;

[0091] The core operation data determination module includes a coordinate system establishment unit, a piecewise function determination unit, a data comparison unit, and a data group expansion unit;

[0092] The coordinate system establishment unit is used to establish a plane rectangular coordinate system according to the operation data group; the piecewise function determination unit is used to connect the coordinate points formed by each operation data group in the plane rectangular coordinate system in pairs to form a piecewise function; the data comparison unit is used to compare the piecewise function with the operation data to determine whether there is core operation data; the data group expansion unit is used to, when the data comparison unit determines that there is no core operation data, form more operation data groups by adjusting the set threshold or breaking through the operation authority.

[0093] The encryption and sending module is used to perform encryption processing on the determined core operation data, and perform packaging processing on the operation data formed by the operator within the operation authority, and send it to the storage terminal.

[0094] Embodiment 4: A readable storage medium stores a computer program, and when the computer program is executed on a processor, the data financial security risk analysis method described above is implemented.

[0095] For those skilled in the art, it is obvious that the present invention is not limited to the details of the above exemplary embodiments, and without departing from the spirit or basic characteristics of the present invention, the present invention can be implemented in other specific forms. Therefore, from any point of view, the embodiments should be regarded as exemplary and non-limiting. The scope of the present invention is defined by the appended claims rather than the above description. Therefore, it is intended to include all changes falling within the meaning and scope of the equivalent elements of the claims within the present invention.

Claims

1. A data financial security risk analysis method, characterized in that: include: Configure corresponding operation permissions for operators through the permission configuration module; The operator generates operating behaviors within the scope of the operating authority, and the operating data corresponding to the operating behaviors; Perform correlation analysis on the operation data generated by the operator to determine the correlation between the operation data, and associate and bind the operation data based on the correlation between the operation data to obtain an operation data group; Analyze the operation data group and determine the core operation data within the scope of the operator's authority, encrypt the core operation data, and package the encrypted core operation data and other operation data and send them to the storage terminal; For the correlation analysis of operation data, the corresponding operation data is generated through the coherent operation behavior of the operator, and the correlation between the operation data is determined according to the change in the impact of the generation of a single operation data on the generated operation data. When the correlation between the operation data reaches the set threshold, the operation data are associated and bound to obtain an operation data group; the operation data group includes the independent variable operation data a i and dependent variable operational data a j ; The operation data group to be associated and bound is used as the analysis object for determining the core operation data, and the operation data in the operation data group is traversed by function analysis to determine the core operation data; The function analysis method includes the following steps: S1, operate data a with independent variable i is the horizontal axis, and the dependent variable is used to operate the data a j Establish a plane rectangular coordinate system for the ordinate; S2, positioning the formed operation data group in the plane rectangular coordinate system, any operation data group forms a coordinate point (a) in the plane rectangular coordinate system i ,a j ); S3, connecting the coordinate points in the plane rectangular coordinate system in pairs to form several groups of piecewise functions F; S4. Determine whether there is a piecewise function F i-j Equal to a i or a j ; if it exists, then a i or a j is the core operation data, where F i-j Indicates operation data a i With operation data a j The piecewise function formed between them in the rectangular coordinate system.

2. A data financial security risk analysis method according to claim 1, characterized in that: The operator's operation behavior within the scope of operation authority A i The generated operation data is a i , where A i represents the i-th operation behavior of the A-th operator. The set of operation behaviors corresponds to the set of operation data. The total number of operation behaviors of the operator in a set period is set to n; When any operation data is generated or changed, a monitoring node is established for the generated operation data to monitor the change amount of the generated operation data and form a set of change amounts Δ, Δ = {Δ i-j }, where i represents the i-th operation data a generated or changed i , j represents the jth operation data a generated j , i, j∈n; When Δ i-j ≥σ, it is determined that the correlation between the operation data reaches the set threshold σ, and the operation data a i and operation data a j Perform association binding to form an operation data group [a i ,a j ,Δ i-j ], where a i is the independent variable operation data, a j Manipulate data for the dependent variable.

3. A data financial security risk analysis method according to claim 1, characterized in that: When determining the core operation data, if there is no piecewise function F i-j Equal to a i or a j ; The set threshold σ is adjusted or the operation authority is exceeded to form more operation data groups.

4. A data financial security risk analysis method according to claim 3, characterized in that: For the breakthrough of operation authority, when any operation data is generated or changed, it establishes a connection with the operation data monitoring nodes under other operation authorities, monitors the change amount of the operation data generated under other operation authorities, and forms a collection of the change amount. According to the set threshold σ, the operation data group is formed in, Indicates operation data a i With operation data a j The amount of change; Then execute steps S1-S4 of the function analysis method to determine the core operation data.

5. A data financial security risk analysis system for executing the data financial security risk analysis method according to any one of claims 1 to 4, characterized in that: The system includes a permission configuration module, an operation recording module, a correlation analysis module, a core operation data determination module and an encryption sending module; The permission configuration module is used to configure corresponding operation permissions for operators; the operation recording module is used to record the operation behavior of operators and the operation data generated corresponding to the operation behavior; The association analysis module is used to analyze the association between the generated operation data, and to associate and bind the associated operation data to form an operation data group; the core operation data determination module is used to analyze the operation data group formed by the association analysis module to determine the core operation data; the encryption and sending module is used to encrypt the determined core operation data, and to package the operation data formed by the operator within the scope of the operation authority and send it to the storage terminal.

6. The data financial security risk analysis system according to claim 5, characterized in that: The correlation analysis module includes a monitoring node unit, a threshold setting unit and a correlation judgment unit; the monitoring node unit is used to establish a monitoring node for the generated operation data and monitor the change amount of the generated operation data; The threshold setting unit is used to set and adjust the associated binding threshold of the change amount of the operation data; the association judgment unit is used to judge whether the operation data meets the threshold setting, and associate and bind the operation data that meets the threshold setting; The core operation data determination module includes a coordinate system establishment unit, a piecewise function determination unit, a data comparison unit and a data group expansion unit; The coordinate system establishment unit is used to establish a plane rectangular coordinate system based on the operation data group; the piecewise function determination unit is used to connect the coordinate points formed by each operation data group in the plane rectangular coordinate system in pairs to form a piecewise function; the data comparison unit is used to compare the piecewise function with the operation data to determine whether there is core operation data; the data group expansion unit is used to form more operation data groups by adjusting the set threshold or breaking through the operation authority when the data comparison unit determines that there is no core operation data.

7. A readable storage medium, characterized in that: It stores a computer program, which, when executed on a processor, implements the data financial security risk analysis method as described in any one of claims 1-4.

Images