Security management system and method based on SIM card online handling

Abstract

The invention discloses a security management system and method based on SIM card online transaction, relates to the technical field of SIM cards, and solves the technical problem that the existing SIM card online business transaction does not evaluate the transaction environment, resulting in high probability of information leakage in the transaction process and low security of the SIM card online transaction. The data acquisition module is used for acquiring network environment data, terminal environment data and cardholder information; the state detection module is used for generating a terminal state according to the network environment data and the terminal environment data; when the terminal state is a safe state, entering a business handling module; otherwise, entering a risk early warning module; the service handling module is used for generating recommendation services according to the work order data; generating a service auxiliary score according to the handling service, the cardholder information and the recommendation service; the risk early warning module is used for performing terminal risk early warning according to the terminal state; generating an early warning signal according to the service auxiliary score; therefore, the security of online business handling is improved.

Description

Technical Field

[0001] The present application belongs to the field of SIM card technology, and relates to SIM card technology, and specifically to a security management system and method based on online handling of SIM cards. Background Art

[0002] SIM card online processing includes online card processing, broadband services and value-added services. Through online card processing, operators have moved traditional business hall services to online platforms, making business processing more convenient and quick. Users can apply for mobile communication services online through the operator's website or mobile application, without having to go to the business hall in person, saving time and energy; online SIM card services allow users to apply for services anytime and anywhere, avoiding the trouble of waiting in line; allowing users to enjoy a variety of online services; value-added services provide users with more convenient and personalized choices.

[0003] The prior art (the invention patent announcement number is CN107113614B) discloses a method and system for remotely handling SIM cards, which includes the following steps: data acquisition, the operator provides an online window to obtain the identity authentication data filled in by the smart device user; review, the operator reviews the user's identity and number based on the order generated by the user's data, including image identification through image recognition and face recognition. Through the technical solution of the present invention, users can completely realize the operation of opening and changing cards on the Internet, and improve security through identity authentication.

[0004] The above-mentioned remote SIM card processing method verifies the applicant's name, ID number, home address, contact information, photos of the front and back of the ID card and other personal privacy information online; when the network used by the applicant or the equipment used for processing is less secure, online identity verification at this time may cause a large amount of important personal information of the applicant to be leaked; in addition to a large amount of personal information required for verification during the card activation process, a large amount of personal information verification is also required when processing other SIM card services, such as traffic packages, call packages and other packages; if the network used by the applicant or the equipment used for processing is invaded by others at this time; when verifying information transmission through online business processing, the risk of personal information leakage is relatively high, resulting in low security of online SIM business processing; therefore, a security management system and method based on online SIM card processing is needed. Summary of the invention

[0005] The present application aims to solve at least one of the technical problems existing in the prior art; to this end, the present application proposes a security management system and method based on online SIM card processing, which is used to solve the technical problem that the existing online SIM card service processing does not evaluate the processing environment, resulting in a high probability of information leakage during the processing process, making the online SIM card processing less secure.

[0006] To achieve the above-mentioned purpose, the first aspect of the present application provides a security management system based on online handling of SIM cards, including: a data collection module, a status detection module, a business handling module, a risk warning module and a database; The data collection module: obtains the network environment data, terminal environment data and cardholder information of the processing terminal through the processing application; The status detection module: obtains the network environment data and terminal environment data of the processing terminal; generates the terminal status according to the network environment data and the terminal environment data; when the terminal status is a safe state, enters the business processing module; otherwise, enters the risk warning module; The business processing module: queries the database to obtain the corresponding work order data according to the cardholder information; generates recommended business according to the work order data; obtains a number of processing businesses, and generates business auxiliary scores according to the processing businesses, cardholder information and recommended businesses; The risk warning module: performs terminal risk warning according to the terminal status; and obtains the business auxiliary score corresponding to the pre-processed business, and generates a warning signal according to the business auxiliary score.

[0007] The present application obtains network environment data and terminal environment data of the processing terminal; generates terminal status according to the network environment data and terminal environment data; determines whether the terminal status is a safe status; if yes, obtains cardholder information, and obtains corresponding work order data according to the cardholder information query; generates recommended services according to the work order data; obtains several processing services, and generates business auxiliary scores according to the processing services, cardholder information and recommended services; obtains business auxiliary scores corresponding to pre-processing services, and generates early warning signals according to the business auxiliary scores; if no, performs terminal risk early warning according to the terminal status; implements a comprehensive security assessment of the processing terminal before processing services, and conducts a rationality assessment of pre-processing services during the processing of services; performs security management on the entire process of SIM online service processing to improve the security of SIM online service processing.

[0008] Preferably, generating the terminal status according to the network environment data and the terminal environment data includes: Inputting network environment data into a network evaluation model to obtain a corresponding network security score; the network evaluation model is obtained by training an artificial intelligence model; Extract application information, permission data, and usage data of each terminal application in the terminal environment data, and generate a corresponding terminal environment security score based on the application information, permission data, and usage data; The network security score and the terminal environment security score are weighted and summed to obtain the terminal security score; When the terminal security score is greater than the set security score threshold, the terminal status is set to a safe state; otherwise, the terminal status is set to a dangerous state.

[0009] Preferably, the network evaluation model is obtained by training an artificial intelligence model, including: Acquire a number of network environment data and their corresponding network security scores; integrate the number of network environment data and network security score data into a number of training data and test data; The artificial intelligence model is trained using training data; the trained artificial intelligence model is tested using test data; and finally a network evaluation model is obtained, whose input is network environment data and output is network security score; wherein the artificial intelligence model includes BP neural network model and RBF neural network model.

[0010] Preferably, generating a corresponding terminal environment security score according to the application information, permission data and usage data includes: Extract the registration number and application source from the application information; when the registration number belongs to the registration number database and the application source is an official channel, set the application source security score to "1"; otherwise, set the application source security score to "0"; Extract the permission level corresponding to each requested permission in the permission data; marked as ; Obtain the application type of each terminal application; generate the corresponding usage security score for each terminal based on the application type and usage data ; By formula The terminal environment security score ZHP is calculated; among them, , and All are proportionality coefficients; Score the safety of source numbered n; is the adjustment coefficient; The permission level corresponding to the requested permission numbered i corresponding to the terminal application numbered n; i=1, 2, ..., In; In is the total number of requested permissions numbered n; is the weight coefficient of each terminal application; n=1, 2, ..., N; N is the number of terminal applications. It is specifically set by online time and installation time.

[0011] Preferably, generating a usage security score corresponding to each terminal according to the application type and usage data includes: Get the average power usage data and average traffic usage data in a period of time corresponding to the application type, and mark them as and ; Extract the power usage data and traffic usage data for each set period in the usage data and mark them as and ; t is the number of the time period, n is the number of the terminal application; By formula The usage security score of the terminal application numbered n is calculated, where: and is the proportionality coefficient; is the weight coefficient corresponding to the time period numbered t; t=1, 2, …, T; T is the total number of set time periods.

[0012] Preferably, generating a recommended service based on the work order data includes: Extract the usage of several business items corresponding to each recorded time in the work order data. The usage of the same business item is fitted into a corresponding business prediction curve in the order of recording time, and the predicted usage corresponding to the business item at the next recording time is predicted by the business prediction curve; each predicted usage is obtained; and the predicted usage corresponding to each business item is integrated into a recommended business.

[0013] Preferably, generating a business auxiliary score based on the processed business and recommended business includes: Get the amount corresponding to each business item in each business, marked as ; Extract the predicted usage corresponding to each business item in the recommended business and mark it as ; m is the number of the business item; By formula The business support score YFP is calculated; wherein m=1, 2, ..., M; M is the total number of business items; Obtain the business assistance score for each business handled in turn.

[0014] This application uses a method in which the greater the gap between each business item in the business being processed and each business item in the estimated recommended business, the less the user who is processing the business knows about his or her own usage, and the greater the difficulty in processing the business; or the probability of information leakage occurring when others use the user's information to process the business is greater; this indicates that relevant personnel are needed to assist at this time; the specific situation of the user's processing has been confirmed, and the corresponding business assistance score is higher at this time; this facilitates timely assistance to users in processing business and avoids information leakage caused by others processing business on their behalf.

[0015] Preferably, the terminal risk warning according to the terminal status includes: Obtaining a network security score. When the network security score is less than the set network security threshold, generating a network risk warning message and sending it to the processing terminal; and, Obtain the application security score of each terminal application; the application security score YAP is calculated by the formula Calculated; Terminal applications whose application security scores are lower than the set application security threshold are marked as risky applications, and risk warning information is generated based on the risky applications and sent to the processing terminal.

[0016] Preferably, obtaining the business assistance score corresponding to the pre-processing business, and generating the warning signal according to the business assistance score, includes: When the business assistance score corresponding to the pre-processing business is greater than the set business assistance score threshold, an auxiliary warning signal is generated; the relevant business personnel are notified to make telephone inquiries and assist in the processing; otherwise, an independent processing warning signal is generated.

[0017] The second aspect of the present application provides a security management method based on online handling of a SIM card, comprising the following steps: Step 1: Obtain the network environment data and terminal environment data of the processing terminal; Step 2: Generate terminal status according to network environment data and terminal environment data; Step 3: Determine whether the terminal status is safe, if yes, proceed to step 4; if no, proceed to step 7; Step 4: Obtain cardholder information, and obtain corresponding work order data based on the cardholder information; generate recommended services based on the work order data; Step 5: Obtain a number of business operations and generate business auxiliary scores based on the business operations, cardholder information and recommended business; Step 6: Obtain the business assistance score corresponding to the pre-processing business, and generate an early warning signal based on the business assistance score; Step 7: Issue terminal risk warning based on terminal status.

[0018] Compared with the prior art, the beneficial effects of this application are: 1. This application obtains the network environment data and terminal environment data of the processing terminal; generates the terminal status according to the network environment data and the terminal environment data; determines whether the terminal status is a safe state; if yes, obtains the cardholder information, and obtains the corresponding use work order data according to the cardholder information query; generates recommended services according to the use work order data; obtains several processing services, and generates a business auxiliary score according to the processing services, cardholder information and recommended services; obtains the business auxiliary score corresponding to the pre-processing service, and generates an early warning signal according to the business auxiliary score; if no, performs a terminal risk early warning according to the terminal status; realizes a comprehensive security assessment of the processing terminal before the business is processed, and performs a rationality assessment of the pre-processing business during the business processing; performs security management on the entire process of SIM online business processing to improve the security of SIM online business processing.

[0019] 2. This application generates a business assistance score based on the gap between each business item in the business being processed and each business item in the estimated recommended business; it is convenient to help users to handle business in a timely manner and avoid information leakage caused by others handling business on their behalf. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0021] Figure 1 This is a schematic diagram of the module connection of the security management system in this application; Figure 2 Schematic diagram of the safety management method in this application. DETAILED DESCRIPTION

[0022] The technical solution of the present application will be described clearly and completely in conjunction with the embodiments below. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present application.

[0023] See also Figure 1 , the first aspect of the present application provides a security management system based on online handling of SIM cards, including: a data collection module, a status detection module, a business handling module, a risk warning module and a database; Data collection module: obtains network environment data, terminal environment data and cardholder information of the processing terminal through the processing application; network environment data includes the network type, security protocol and number of devices connected to the network connected to the processing terminal and other related data of the processing terminal; network types include WIFI and mobile network; terminal environment data includes application information, permission data and usage data of each terminal application installed in the processing terminal; the processing terminals for SIM card business are mostly smart phones, terminal applications are software installed on smart phones, and permission data are permissions that the corresponding software requires the mobile phone to open, such as permissions to read device storage data; usage data are usage data such as traffic and electricity during the application period; cardholder information is the information of the SIM user; it can be understood that the acquisition of the above information is authorized by the corresponding user; Status detection module: obtain the network environment data and terminal environment data of the processing terminal; generate the terminal status according to the network environment data and terminal environment data; since the cardholder's privacy information needs to be obtained and verified when processing SIM services, if information leakage occurs at this time, it will lead to very serious leakage impact; the terminal status is the status of evaluating the terminal security at this time based on the security of the processing terminal connecting to the network and the security of the processing terminal itself; including security status and risk status; the security status indicates that the security of the processing terminal itself is high at this time, and the security of the connection network is also high, and the risk of information leakage when processing business is low; the risk status indicates that the current processing terminal or the connection network has an abnormality, and the probability of information leakage is high; when the terminal status is a safe state, enter the business processing module; otherwise, enter the risk warning module; Business processing module: query the database to obtain the corresponding usage work order data according to the cardholder information; the usage work order data is the usage data of the SIM, including the usage of traffic and call charges, etc.; generate recommended services according to the usage work order data; the recommended service data is the usage of various service items that are generated according to the current usage of the SIM and meet the current SIM usage; service items include traffic and call charges, etc.; obtain several processing services, which are packages composed of various existing service items that can be processed by the SIM, such as 10G traffic, 39 call charges, 300 minutes of talk time, etc. in a month, and generate service auxiliary scores according to the processing services, cardholder information and recommended services; the service auxiliary scores are scores generated according to the gap between various existing processing services and recommended services; it is used to judge whether the services handled by the user are normal. If not, customer service needs to intervene to help the user handle the services; Risk warning module: performs terminal risk warning according to the terminal status; and obtains the business auxiliary score corresponding to the pre-processing business, and generates a warning signal according to the business auxiliary score; the pre-processing business is the business requested by the user.

[0024] This embodiment obtains network environment data and terminal environment data of the processing terminal; generates a terminal status according to the network environment data and the terminal environment data; determines whether the terminal status is a safe status; if yes, obtains cardholder information, and obtains corresponding work order data according to the cardholder information query; generates recommended services according to the work order data; obtains several processing services, and generates a business auxiliary score according to the processing services, cardholder information and recommended services; obtains the business auxiliary score corresponding to the pre-processing service, and generates an early warning signal according to the business auxiliary score; if no, performs a terminal risk early warning according to the terminal status; implements a comprehensive security assessment of the processing terminal before the service is processed, and performs a rationality assessment of the pre-processing service during the service processing; performs security management on the entire process of SIM online service processing to improve the security of SIM online service processing.

[0025] Generate terminal status based on network environment data and terminal environment data, including: The network environment data is input into the network evaluation model to obtain the corresponding network security score; the network evaluation model is obtained by training the artificial intelligence model; the network risk score is the score given by the experts to the security of the network based on the network environment data; Extract application information, permission data and usage data of each terminal application in the terminal environment data, and generate the corresponding terminal environment security score based on the application information, permission data and usage data; the terminal environment security score is the security status of the processing terminal itself generated based on the security status of each terminal application installed inside the processing terminal; the higher the terminal environment security score, the higher the security of the terminal itself at this time, and the lower the probability of leaking personal information; The terminal security score is obtained by weighted summing up the network security score and the terminal environment security score; it is understandable that when weighted summing up the network security score and the terminal environment security score, the specific weights of these two items are set according to expert experience; the terminal security score is an assessment of the business conditions at this time based on the security of the terminal connection network and the security of its own environment; the higher the terminal security score, the higher the security of the connection network and its own environment at this time, and the lower the possibility of information leakage; of course, the lower the terminal security score, the lower the security of the connection network or its own environment at this time, the higher the possibility of information leakage, and it is not suitable for business processing at this time; When the terminal security score is greater than the set security score threshold, the terminal status is set to a safe state; otherwise, the terminal status is set to a dangerous state.

[0026] The network evaluation model is obtained through artificial intelligence model training, including: obtaining a number of network environment data and its corresponding network security score; the network risk score is the score given by experts to the security of the network based on the network environment data; the lower the network security score, the lower the security of the network, that is, the security of the network type is low, the security of the security protocol is low, and the number of device connections is large, that is, there are many unstable factors in the network environment, and in this network environment, the terminal device is vulnerable to attack; the network environment data includes network type, security protocol and number of device connections; several network environment data and network security score data are integrated into several training data and test data; Use training data to train the artificial intelligence model; use test data to test the trained artificial intelligence model; specifically, input the network environment data in the test data into the trained artificial intelligence model, output the corresponding network security score, and determine whether the difference between the output network security score and the network security score recorded in the test data is within an acceptable range. If so, it means that the test data has passed the test and the next set of test data is tested; if not, adjust the relevant parameters of the artificial intelligence model, and use the current set of test data to test it again until a set proportion of the test data passes the test; finally, a network evaluation model with network environment data as input and network security score as output is obtained; wherein the artificial intelligence model includes a BP neural network model and an RBF neural network model.

[0027] Generate the corresponding terminal environment security score based on the application information, permission data and usage data, including: extracting the registration number and application source in the application information; when the registration number belongs to the registration number library and the application source is an official channel, set the application source security score to "1"; otherwise, set the application source security score to "0"; it can be understood that all kinds of information obtained in this application are authorized by the user; if the application installed in the mobile phone does not have a registration number, or the registration number is a false registration number, that is, the registration number is not in the registration number library, then the security of the application is low, and the risk of abnormal business handling is high; at the same time, if the source of the application is not an official channel, such as downloaded through a browser, or an application of a software installation package shared by others, even if there is an application with a compliant registration number, it is likely to be changed by others, then the security of the application is low, and the risk of abnormal business handling is high; Extract the permission level corresponding to each requested permission in the permission data; marked as ; The authority level experts evaluate each authority according to the privacy degree and the amount of private data involved in each authority; the higher the authority level, the deeper the privacy degree involved in the authority and the more private data involved; in this embodiment, the authority level for reading information is set to level three, the authority level for volume control is set to level one, etc.; level three is higher than level one; the higher the authority requested by the terminal application, the greater the impact when the terminal application is at risk of leakage; the more authorities requested by the terminal application, the greater the impact when the terminal application is at risk of leakage; Obtain the application type of each terminal application; generate the corresponding usage security score for each terminal based on the application type and usage data ; By formula The terminal environment security score ZHP is calculated; among them, , and They are all proportional coefficients, which are used to condition the proportional relationship between the three parameters. The specific values ​​are set according to expert experience; Score the safety of source numbered n; The adjustment coefficient is used to determine the degree of influence of each permission level on the security score. The specific value is set based on expert experience. is the permission level corresponding to the requested permission numbered i corresponding to the terminal application numbered n; i=1, 2, ..., In; In is the total number of requested permissions numbered n; n=1, 2, ..., N; N is the number of terminal applications; is the weight coefficient of each terminal application, which can be set according to expert experience, or generated according to the traffic usage and power usage of each application period and sleep period of the terminal application, including: obtaining the traffic usage of the terminal application in the application period and the sleep period, marked as YLSj and XLSj respectively; and the power usage in the application period and the sleep period, marked as YDSj and XDSj respectively; j is the number of the sleep period and the application period, the sleep period and the application period in this embodiment appear in pairs, and a pair of sleep period and application period share a number; for example, in this embodiment, 8:00 am to 11:00 pm is set as the application period, and 11:00 pm to 8:00 am is set as the sleep period, the application period indicates the period when the user himself uses the mobile phone, and the sleep period is the period when the user does not use the mobile phone; it can be understood that the setting of the above application period and sleep period is the setting method adopted in this embodiment; it is also possible to obtain the user's mobile phone usage information with the user's consent, and set the sleep period and application period according to the screen status in the usage information. If the screen status is working, the corresponding period is set as the application period; if the screen status is not working, the corresponding period is set as the sleep period; By formula The risk coefficient FP of each terminal application is calculated; wherein θ1, θ2, θ3 and θ4 are weight coefficients, θ1>θ3, θ2>θ4, and the specific values ​​are set according to expert experience; ZXLj is the maximum traffic usage of each terminal application in the leisure period numbered j; ZXDj is the maximum power usage of each terminal application in the leisure period numbered j; ZYLj is the maximum traffic usage of each terminal application in the application period numbered j; ZYDj is the maximum power usage of each terminal application in the application period numbered j; j=1, 2, ..., J; J is the total number of leisure periods or application periods; the risk coefficients of each terminal application are normalized to obtain the weight coefficients corresponding to each terminal application .

[0028] This embodiment calculates the terminal environment security score through the above formula; the more the registration numbers and application sources of each terminal application do not comply with the relevant processes, the higher the probability of information leakage through the corresponding software; the more permissions each terminal application requests and the higher the permission level obtained, if information leakage occurs, the more serious the information leakage will be; the lower the security score of each terminal application, the greater the probability of information leakage of the corresponding software; the less suitable the terminal environment is for business processing at this time; the lower the corresponding terminal environment security score is set.

[0029] Generate the usage security score corresponding to each terminal according to the application type and usage data, including: obtaining the average power usage data and average traffic usage data in a period corresponding to the application type, and marking them as and ; The time period in this embodiment is a set duration, such as one hour, one day, etc.

[0030] Extract the power usage data and traffic usage data for each set period in the usage data and mark them as and ; t is the number of the time period, n is the number of the terminal application; By formula The usage security score of the terminal application numbered n is calculated, where: and is the proportional coefficient, which is used to adjust the proportional relationship between flow and power. The specific value is set according to expert experience; is the weight coefficient corresponding to the time period numbered t, and the specific value is set according to expert experience; t=1, 2, ..., T; T is the total number of set time periods; the weight coefficient in this embodiment According to the settings of each time period, the closer the time period is to the current time, the larger the corresponding weight coefficient is set.

[0031] This embodiment calculates the usage security score of each terminal application through the above formula; when the traffic usage and power usage of a terminal application in a time period are much higher than the average traffic usage and average power usage of the same application type, it means that the terminal application is likely to be implanted with a virus. When business is conducted in the presence of this terminal application, the risk of personal information leakage is relatively high, so its corresponding security score is set relatively low.

[0032] Generate recommended services based on the work order data, including: extracting the usage of several business items corresponding to each recording time in the work order data, the business items include traffic and telephone charges, etc.; the usage corresponding to the business items includes traffic usage and telephone charges, etc.; specifically, if the recording time is the last day of each month, the traffic usage data at this time is the usage value of the traffic this month; such as 10G and 40G, etc.; The usage of the same business item is fitted into the corresponding business prediction curve according to the order of the recording time, and the predicted usage corresponding to the business item at the next recording time is predicted by the business prediction curve; each predicted usage is obtained; and the predicted usage corresponding to each business item is integrated into a recommended business. The recommended business is a combination of various businesses that best suits the corresponding user, generated based on the user's recent usage of various businesses.

[0033] Generate business auxiliary scores based on the business handled and recommended business, including: obtaining the amount corresponding to each business item in each business handled, marked as ; Extract the predicted usage corresponding to each business item in the recommended business and mark it as ; m is the number of the business item; By formula The business support score YFP is calculated; wherein m=1, 2, ..., M; M is the total number of business items; Obtain the business assistance score for each business handled in turn.

[0034] The greater the gap between the various business items in the business processing and the various business items in the estimated recommended business, the less the user handling the business understands his own usage situation, and the more difficult it is to handle the business; or the probability of information leakage occurs when others use the user's information to handle the business; this means that relevant personnel are needed to assist at this time; the specific situation of the user's handling has been confirmed, and the corresponding business assistance score is higher at this time; it is convenient to help users handle business in a timely manner and avoid information leakage caused by others handling business on behalf of others.

[0035] Terminal risk warning is performed according to the terminal status, including: obtaining a network security score. When the network security score is less than the set network security threshold, a network risk warning message is generated and sent to the processing terminal; and obtaining the application security score of each terminal application. The application security score YAP is calculated by the formula Calculated; Terminal applications whose application security scores are lower than the set application security threshold are marked as risky applications, and risk warning information is generated based on the risky applications and sent to the processing terminal; reminding the user that the terminal device at this time is at risk of corresponding information leakage; enabling the user to disconnect the network connection or uninstall the relevant terminal application in time to reduce the occurrence of information leakage.

[0036] The business assistance score corresponding to the pre-processing business, and the warning signal generated according to the business assistance score, include: when the business assistance score corresponding to the pre-processing business is greater than the set business assistance score threshold, the business assistance score threshold is set according to expert experience; then an auxiliary warning signal is generated; the relevant business personnel are notified to make telephone inquiries and assist in the processing operation; otherwise, an independent processing warning signal is generated. It is understandable that the business personnel can make business recommendations based on the business assistance scores of each business, and inform the processing user of the processing risk situation; if the user's expected traffic usage is 10G, the traffic quota in his current business project is 100G, which is far more than his normal traffic usage; at this time, it means that the user will not handle the business, or is unclear about his own usage, and needs assistance; even others may use the card to handle business, and information leakage may occur at this time; in either case, the business personnel need to assist in handling, through calls, ask the user's specific situation, and help the user to handle the business; to ensure that the handling of the business is more matched, avoid the occurrence of wrong handling as much as possible, and improve the efficiency of business handling.

[0037] See also Figure 2 The second aspect of the present application provides a security management method based on online handling of a SIM card, comprising the following steps: Step 1: Obtain the network environment data and terminal environment data of the processing terminal; Step 2: Generate terminal status according to network environment data and terminal environment data; Step 3: Determine whether the terminal status is safe, if yes, proceed to step 4; if no, proceed to step 7; Step 4: Obtain cardholder information, and obtain corresponding work order data based on the cardholder information; generate recommended services based on the work order data; Step 5: Obtain a number of business operations and generate business auxiliary scores based on the business operations, cardholder information and recommended business; Step 6: Obtain the business assistance score corresponding to the pre-processing business, and generate an early warning signal based on the business assistance score; Step 7: Issue terminal risk warning based on terminal status.

[0038] Part of the data in the above formula is calculated by removing the dimension and taking its numerical value. The formula is a formula closest to the actual situation obtained by software simulation of a large amount of collected data; the preset parameters and preset thresholds in the formula are set by technical personnel in this field according to actual conditions or obtained through simulation of a large amount of data.

[0039] How this application works: The present application obtains network environment data and terminal environment data of the processing terminal; generates terminal status according to the network environment data and terminal environment data; determines whether the terminal status is a safe status; if yes, obtains cardholder information, and obtains corresponding work order data according to the cardholder information query; generates recommended services according to the work order data; obtains several processing services, and generates business auxiliary scores according to the processing services, cardholder information and recommended services; obtains business auxiliary scores corresponding to pre-processing services, and generates early warning signals according to the business auxiliary scores; if no, performs terminal risk early warning according to the terminal status; implements a comprehensive security assessment of the processing terminal before processing services, and conducts a rationality assessment of pre-processing services during the processing of services; performs security management on the entire process of SIM online service processing to improve the security of SIM online service processing.

[0040] The above embodiments are only used to illustrate the technical method of the present application and are not intended to limit it. Although the present application has been described in detail with reference to the preferred embodiments, a person of ordinary skill in the art should understand that the technical method of the present application may be modified or replaced by equivalents without departing from the spirit and scope of the technical method of the present application.

Claims

1. A security management system based on SIM card online processing, characterized in that: include: Data collection module, status detection module, business processing module, risk warning module and database; The data collection module: obtains the network environment data, terminal environment data and cardholder information of the processing terminal through the processing application; The state detection module: obtains network environment data and terminal environment data of the processing terminal; generates terminal status according to the network environment data and terminal environment data; when the terminal status is a safe state, enters the business processing module; Otherwise, enter the risk warning module; The business processing module: queries the database to obtain the corresponding work order data according to the cardholder information; Generate recommended business based on the work order data; Obtain a number of processed businesses and generate business assistance scores based on the processed businesses, cardholder information and recommended businesses; The risk warning module: performs terminal risk warning according to the terminal status; Also, obtain the business assistance score corresponding to the pre-processing business, and generate an early warning signal based on the business assistance score.

2. A security management system based on SIM card online processing according to claim 1, characterized in that: Generating the terminal status according to the network environment data and the terminal environment data includes: Inputting network environment data into a network evaluation model to obtain a corresponding network security score; the network evaluation model is obtained by training an artificial intelligence model; Extract application information, permission data, and usage data of each terminal application in the terminal environment data, and generate a corresponding terminal environment security score based on the application information, permission data, and usage data; The network security score and the terminal environment security score are weighted and summed to obtain the terminal security score; When the terminal security score is greater than the set security score threshold, the terminal status is set to a safe state; otherwise, the terminal status is set to a dangerous state.

3. A security management system based on SIM card online processing according to claim 2, characterized in that: The network evaluation model is obtained through artificial intelligence model training, including: Acquire a number of network environment data and their corresponding network security scores; integrate the number of network environment data and network security score data into a number of training data and test data; The artificial intelligence model is trained using training data; the trained artificial intelligence model is tested using test data; and finally a network evaluation model is obtained, whose input is network environment data and output is network security score; wherein the artificial intelligence model includes BP neural network model and RBF neural network model.

4. A security management system based on SIM card online processing according to claim 2, characterized in that: Generating a corresponding terminal environment security score according to the application information, permission data and usage data includes: Extract the registration number and application source from the application information; when the registration number belongs to the registration number database and the application source is an official channel, set the application source security score to "1"; otherwise, set the application source security score to "0"; Extract the permission level corresponding to each requested permission in the permission data; marked as ; Obtain the application type of each terminal application; generate the corresponding usage security score for each terminal based on the application type and usage data ; By formula The terminal environment security score ZHP is calculated; among them, , and All are proportionality coefficients; Score the safety of source numbered n; is the adjustment coefficient; The permission level corresponding to the requested permission numbered i corresponding to the terminal application numbered n; i=1, 2, ..., In; In is the total number of requested permissions numbered n; is the weight coefficient of each terminal application; n=1, 2, ..., N; N is the number of terminal applications.

5. A security management system based on SIM card online processing according to claim 4, characterized in that: The generating of the usage security score corresponding to each terminal according to the application type and usage data includes: Get the average power usage data and average traffic usage data in a period of time corresponding to the application type, and mark them as and ; Extract the power usage data and traffic usage data for each set period in the usage data and mark them as and ; t is the number of the time period, n is the number of the terminal application; By formula The usage security score of the terminal application numbered n is calculated, where: and is the proportionality coefficient; is the weight coefficient corresponding to the time period numbered t; t=1, 2, …, T; T is the total number of set time periods.

6. A security management system based on SIM card online processing according to claim 1, characterized in that: The generating of the recommended business according to the work order data includes: Extract the usage of several business items corresponding to each recorded time in the work order data; The usage of the same business item is fitted into a corresponding business prediction curve in the order of recording time, and the predicted usage corresponding to the business item at the next recording time is predicted by the business prediction curve; each predicted usage is obtained; and the predicted usage corresponding to each business item is integrated into a recommended business.

7. A security management system based on SIM card online processing according to claim 1, characterized in that: The generating of business assistance scores according to the handled business and recommended business includes: Get the amount corresponding to each business item in each business, marked as ; Extract the predicted usage corresponding to each business item in the recommended business and mark it as ; m is the number of the business item; By formula The business support score YFP is calculated; wherein m=1, 2, ..., M; M is the total number of business items; Obtain the business assistance score for each business handled in turn.

8. A security management system based on SIM card online processing according to claim 1, characterized in that: The terminal risk warning according to the terminal status includes: Obtaining a network security score. When the network security score is less than the set network security threshold, generating a network risk warning message and sending it to the processing terminal; and, Obtain the application security score of each terminal application; the application security score YAP is calculated by the formula Calculated; Terminal applications whose application security scores are lower than the set application security threshold are marked as risky applications, and risk warning information is generated based on the risky applications and sent to the processing terminal.

9. A security management system based on SIM card online processing according to claim 1, characterized in that: Obtaining the business assistance score corresponding to the pre-processing business, and generating the warning signal according to the business assistance score, including: When the business assistance score corresponding to the pre-processing business is greater than the set business assistance score threshold, an auxiliary warning signal is generated; the relevant business personnel are notified to make telephone inquiries and assist in the processing; otherwise, an independent processing warning signal is generated.

10. A security management method based on SIM card online processing, based on the operation of a security management system based on SIM card online processing according to any one of claims 1 to 9; characterized in that: The following steps are involved: Step 1: Obtain the network environment data and terminal environment data of the processing terminal; Step 2: Generate terminal status according to network environment data and terminal environment data; Step 3: Determine whether the terminal status is safe, if yes, proceed to step 4; if no, proceed to step 7; Step 4: Obtain cardholder information, and obtain corresponding work order data based on the cardholder information; generate recommended services based on the work order data; Step 5: Obtain a number of business operations and generate business auxiliary scores based on the business operations, cardholder information and recommended business; Step 6: Obtain the business assistance score corresponding to the pre-processing business, and generate an early warning signal based on the business assistance score; Step 7: Issue terminal risk warning based on terminal status.

Images