Risk control decision management method and device

Abstract

The invention discloses a risk control decision management method and device, and relates to the technical field of computers. A specific embodiment of the method comprises the steps that a received decision request of a client is responded, a risk control process corresponding to the decision request is executed, the risk control process comprises a first strategy service, and a first decision result corresponding to the first strategy service is acquired; generating a calling request and sending the calling request to a second server, and obtaining a second decision result generated by the second server based on the calling request; and determining a final decision result according to the first decision result and the second decision result, and returning the final decision result to the client. According to the embodiment, the complexity of interaction between systems is reduced, the implementation efficiency of risk control service is improved, and the system stability is improved.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular, to a method and device for risk control decision management. Background Art

[0002] In the financial field, a service provider can provide risk control services externally through a Software as a Service (SaaS) deployment model in the cloud, and a user can use the risk control services by making calls. However, this model cannot meet requirements such as data security and the ability to build its own risk control capabilities. Therefore, related technologies adopt a model that combines the cloud and the local to implement risk control services.

[0003] However, in the above-mentioned method of providing risk control services by combining the cloud and the local, the interaction complexity between systems is high, and when the local risk control efficiency decreases, the implementation efficiency of the risk control services will be significantly reduced, and the system stability is poor. Summary of the Invention

[0004] In view of this, embodiments of the present invention provide a method and device for risk control decision management, which can reduce the complexity of interaction between systems, improve the implementation efficiency of risk control services, reduce the risk of system resource exhaustion, and improve system stability.

[0005] To achieve the above object, according to one aspect of the embodiments of the present invention, a method for risk control decision management is provided, including:

[0006] In response to receiving a decision request from a client, execute a risk control process corresponding to the decision request, where the risk control process includes a first policy service, and obtain a first decision result corresponding to the first policy service;

[0007] Generate a call request and send it to a second server, and obtain a second decision result generated by the second server based on the call request;

[0008] Determine a final decision result according to the first decision result and the second decision result, and return the final decision result to the client.

[0009] Optionally, after generating a call request and sending it to a second server, it further includes: in response to receiving a call success result corresponding to the call request returned by the second server, interrupt the risk control process;

[0010] After obtaining the second decision result generated by the second server based on the call request, it further includes: resume the risk control process.

[0011] Optionally, before executing the risk control process corresponding to the decision request, it includes:

[0012] Obtain each process node corresponding to the risk control process and the execution order of each process node;

[0013] Construct a process execution diagram corresponding to the risk control process according to the execution order of each process node, so as to execute the risk control process according to the process execution diagram;

[0014] Among them, each of the process nodes includes: a first policy service node, an asynchronous interface node corresponding to the second server, and a final policy service node corresponding to the final decision result.

[0015] Optionally, before generating a call request and sending it to the second server, it further includes:

[0016] Determine that the risk control process executes the asynchronous interface node, so as to send the call request through the asynchronous interface node;

[0017] In the case where the risk control process does not execute the asynchronous interface node, use the first decision result as the final decision result.

[0018] Optionally, after interrupting the risk control process, it further includes: storing the current execution state of the process execution diagram;

[0019] Restoring the risk control process includes: continuing to execute the risk control process according to the current execution state of the process execution diagram.

[0020] According to another aspect of the embodiments of the present invention, a method for risk control strategy management is provided, including:

[0021] In response to receiving a call request sent by the first server, generate a second decision result; wherein, the call request is generated by the first server after receiving a decision request from the client, and the first server obtains a first decision result by executing a risk control process corresponding to the decision request; the risk control process includes a first policy service, and the first decision result corresponds to the first policy service;

[0022] Return the second decision result to the first server, so that the first server determines the final decision result according to the first decision result and the second decision result.

[0023] According to still another aspect of the embodiments of the present invention, a device for risk control decision management is provided, including:

[0024] A first acquisition module, in response to a decision request from a client, executes a risk control process corresponding to the decision request, the risk control process includes a first policy service, and obtains a first decision result corresponding to the first policy service;

[0025] A second acquisition module, generates a call request and sends it to the second server, and obtains a second decision result generated by the second server;

[0026] A determination module determines a final decision result based on the first decision result and the second decision result, and returns the final decision result to the client.

[0027] According to another aspect of the embodiments of the present invention, there is provided a device for risk control decision management, including:

[0028] A generation module generates a corresponding second decision result in response to receiving a call request sent by a first server; wherein, the call request is generated by the first server after receiving a decision request from a client, and the first server obtains a first decision result by executing a risk control process corresponding to the decision request; the risk control process includes a first policy service, and the first decision result corresponds to the first policy service;

[0029] A sending module returns the second decision result to the first server, so that the first server returns the final decision result determined according to the first decision result and the second decision result to the client.

[0030] According to still another aspect of the embodiments of the present invention, there is provided an electronic device, including:

[0031] One or more processors;

[0032] A storage device for storing one or more programs,

[0033] When the one or more programs are executed by the one or more processors, the one or more processors implement the method for risk control decision management provided by the present invention.

[0034] According to still another aspect of the embodiments of the present invention, there is provided a computer-readable medium, on which a computer program is stored, and when the program is executed by a processor, it implements the method for risk control decision management provided by the present invention.

[0035] According to still another aspect of the embodiments of the present invention, there is provided a computer program product, including a computer program, and when the computer program is executed by a processor, it implements the method for risk control decision management provided by the present invention.

[0036] One embodiment of the above invention has the following advantages or beneficial effects: In the risk control decision management method of the embodiment of the present invention, after receiving a decision request from the client, the corresponding risk control process is executed. By executing the first policy service, the first decision result corresponding to the first policy service is obtained; a call request is generated and sent to the second server, and the second decision result generated by the second server is obtained. The final decision result is determined according to the first decision result and the second decision result, and the final decision result is returned to the client. This method provides a risk control service in a cloud-ground combination mode in which the first server, such as a cloud risk control system, is connected in series with the second server, such as a local risk control system, improves the risk control implementation efficiency of the cloud-ground combination, reduces the risk of system resource exhaustion, enhances system stability, and reduces the complexity of system interaction.

[0037] The further effects of the above non-conventional optional methods will be described below in conjunction with specific embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] The drawings are used to better understand the present invention and do not constitute an improper limitation of the present invention. Among them:

[0039] Figure 1 is a schematic diagram of the main process of a risk control decision management method according to an embodiment of the present invention;

[0040] Figure 2 is a schematic diagram of system interaction of a risk control decision management method according to an embodiment of the present invention;

[0041] Figure 3 is a flowchart of a risk control decision management method according to an embodiment of the present invention;

[0042] Figure 4 is a schematic diagram of the main modules of a risk control decision management device according to an embodiment of the present invention;

[0043] Figure 5 is an exemplary system architecture diagram to which an embodiment of the present invention can be applied;

[0044] Figure 6 is a schematic diagram of the structure of a computer system of a terminal device or a server suitable for implementing an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0045] The following describes exemplary embodiments of the present invention with reference to the accompanying drawings, including various details of the embodiments of the present invention to facilitate understanding, and they should be considered merely exemplary. Therefore, those of ordinary skill in the art should recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, for clarity and conciseness, descriptions of well-known functions and structures are omitted below.

[0046] It should be noted that in the technical solution of the present disclosure, in aspects such as the collection, gathering, update, analysis, processing, use, transmission, and storage of user personal information, it complies with the provisions of relevant laws and regulations, is used for legal purposes, and does not violate public order and good customs. Necessary measures are taken for user personal information to prevent illegal access to user personal information data, and to safeguard the security of user personal information, network security, and national security.

[0047] Figure 1 is a schematic diagram of the main process of a risk control decision management method according to an embodiment of the present invention, as Figure 1 shown, the method includes the following steps:

[0048] Step S101: In response to receiving a decision request from the client, execute a risk control process corresponding to the decision request. The risk control process includes a first policy service, and obtain a first decision result corresponding to the first policy service;

[0049] Step S102: Generate a call request and send it to the second server, and obtain a second decision result generated by the second server based on the call request;

[0050] Step S103: Determine the final decision result according to the first decision result and the second decision result, and return the final decision result to the client.

[0051] In the embodiment of the present invention, the risk control decision management method can be applied to the field of financial risk control for risk assessment of users. For example, according to the final decision result output by the method, it can be determined whether to provide a loan to the user, thereby providing a decision basis for business personnel.

[0052] In the embodiment of the present invention, the risk control decision management method can be executed by the first server. The first server can be a cloud risk control system. The cloud risk control system provides SAAS (Software-as-a-Service), and is connected in series with the second server such as a local risk control system to provide risk control services. After the first server such as the cloud risk control system receives a decision request sent by the client such as a business system, it can obtain the corresponding risk control process according to the decision request and execute the risk control process. The business system can be a system for obtaining the risk assessment result of the user. For example, the business system can be a loan system, a credit assessment system, etc. That is to say, the decision request may include a user identifier, and the business system sends a decision request to the cloud risk control system to obtain the risk assessment result of the user corresponding to the user identifier.

[0053] In an embodiment of the present invention, the risk control process includes a first policy service, such as a cloud policy service. Executing the risk control process includes executing the first policy service, and through the first policy service, a first decision result corresponding to the first policy service can be obtained. For example, according to the user's cloud data and cloud policies, the cloud decision result of the user can be obtained. Cloud data can include, for example, the user's credit score, etc., and the cloud decision result can be a result indicating the user's risk level, such as the user's risk grade or risk coefficient, etc.

[0054] In an embodiment of the present invention, the decision request may further include a risk control scenario. The risk control scenario corresponds to a business system. If the business system is a loan system, the risk control scenario may be a loan business scenario. Different risk control scenarios may correspond to different risk control processes, that is, risk control processes corresponding to each risk control scenario are pre-configured. After receiving a decision request from the business system, the corresponding risk control process is obtained according to the risk control scenario in the decision request, and the corresponding risk control process is executed.

[0055] In an embodiment of the present invention, before executing the risk control process corresponding to the decision request, it includes: obtaining each process node corresponding to the risk control process and the execution order of each process node; constructing a process execution graph corresponding to the risk control process according to the execution order of each process node, so as to execute the risk control process according to the process execution graph; wherein, each process node includes: a first policy service node, an asynchronous interface node corresponding to a second server, and a final policy service node corresponding to the final decision result.

[0056] In an embodiment of the present invention, the risk control process can be represented by a process execution graph. Executing the risk control process corresponding to the decision request means executing each process node of the risk control process according to the process execution graph. Therefore, before executing the risk control process corresponding to the decision request, obtain each process node of the risk control process and the execution order of each process node, and construct a process execution graph according to the execution order. The process execution graph includes the execution order of each process node. Each process node includes a first policy service node, an asynchronous interface node, and a final policy service node. The asynchronous interface node is used for the first server to send a call request to the second server to start the corresponding execution process of the second server. The final policy service node is used to determine the final decision result. Among them, the asynchronous interface node corresponds to an asynchronous service, and executing the asynchronous service can start the execution process of the second server to execute the second policy service.

[0057] In an embodiment of the present invention, the process execution graph may be a DAG (Directed Acycline Graph), and each process node and its execution order in the risk control process are included in the DAG graph. The execution of the risk control process can be implemented according to the DAG graph. When the first policy service node is executed and the asynchronous interface node is reached, a call request is sent to the second server to enable the second server to start executing the process; after receiving the call success result sent by the second server, the risk control process is suspended; after the second server executes the second policy service based on the execution process and obtains the second decision result corresponding to the second policy service, it calls back the first server to wake up the risk control process and continue to execute the final policy service node to obtain the final decision result and return it to the client.

[0058] In an embodiment of the present invention, before generating and sending the call request to the second server, it further includes: determining that the risk control process executes the asynchronous interface node to send the call request through the asynchronous interface node; in the case where the risk control process does not execute the asynchronous interface node, using the first decision result as the final decision result. That is, when executing the risk control process, it is determined whether to execute the asynchronous interface node. If the asynchronous interface node is executed, a call request is generated and the asynchronous interface node is called to send the call request to the second server. If the asynchronous interface node is not executed, after executing the first policy service node, the final policy service node is directly executed, and the final decision result is the first decision result.

[0059] In an embodiment of the present invention, the final decision result can be obtained according to the first decision result, the second decision result, and a preset rule. If both the first decision result and the second decision result are risk levels, the preset rule can be to use the result with the higher risk level among the first decision result and the second decision result as the final decision result; if both the first decision result and the second decision result are risk coefficients, the preset rule can be to use the result of the weighted sum of the first decision result and the second decision result as the final decision result; other preset rules can also be custom-set.

[0060] In an embodiment of the present invention, after generating and sending the call request to the second server, it further includes: interrupting the risk control process in response to receiving the call success result corresponding to the call request returned by the second server;

[0061] After obtaining the second decision result generated by the second server based on the call request, it further includes: resuming the risk control process.

[0062] In an embodiment of the present invention, when an asynchronous interface node is executed, the first server generates a call request and sends it to the second server, so that the second server generates a second decision result. That is, after receiving the call request, the second server starts an execution process and at the same time returns a call success result to the first server. After receiving the call success result, the first server interrupts the risk control process, that is, suspends the risk control process. The second server executes a second policy service (such as a local policy service) based on the execution process (such as a local risk control process) to generate a second decision result corresponding to the second policy service (such as a local decision result). The second server returns the second decision result to the first server. After receiving the second decision result, the first server resumes the risk control process.

[0063] In an embodiment of the present invention, when an asynchronous interface node is executed, the cloud risk control system is connected in series with the local risk control system. The cloud risk control system sends a call request to the local risk control system. After receiving the call request, the local risk control system starts the local risk control process, that is, begins to execute the local risk control process. The local risk control system returns a call success result corresponding to the call request. After receiving the call success result, the cloud risk control system interrupts the risk control process, that is, suspends the risk control process. The purpose of the cloud risk control system sending a call request to the local risk control system is to trigger the local risk control process. After the local risk control process starts to execute, the local risk control system will quickly return a call success result corresponding to the call request, so that the cloud risk control system suspends the risk control process and ensures the high performance of the risk control service.

[0064] In an embodiment of the present invention, it is possible to determine whether to execute an asynchronous interface node according to the user identifier in the decision request. If the user identifier meets the first preset condition, the asynchronous interface node is not executed; if the user identifier does not meet the first preset condition, the asynchronous interface node is executed. Among them, the first preset condition can be custom-set. For example, the user identifier is in a preset user list, and the preset user list can be low-risk users. The first preset condition can also be set according to whether the cloud decision result corresponding to the user identifier meets the second preset condition.

[0065] In an embodiment of the present invention, after starting to execute the local risk control process, the local risk control system can execute the local policy service based on the local risk control process, so as to obtain a local decision result corresponding to the local policy service. The local risk control system returns the local decision result to the cloud risk control system. After receiving the local decision result, the cloud risk control system resumes the risk control process, obtains the final decision result according to the cloud decision result and the local decision result, and then can return the final decision result to the business system through a message middleware such as a message queue. By asynchronously executing the local policy service, the implementation efficiency and availability of the cloud risk control service are ensured.

[0066] In an embodiment of the present invention, the local risk control system executes a local risk control process, including executing a local policy service. The local policy service is used to determine a local decision result, that is, the local decision result is obtained based on the user's local data and the local policy service. The local data may include a credit report, historical loan data, etc. By means of an asynchronous manner, the local risk control system can support an artificial intervention mode, and a risk assessment is carried out by means of manual review, with relatively high flexibility.

[0067] In an embodiment of the present invention, after interrupting the risk control process, it further includes: storing the current execution state of the process execution diagram; resuming the risk control process, including: continuing to execute the risk control process according to the current execution state of the process execution diagram. The risk control process is executed by a thread of the first server. After suspending the risk control process, the current execution context of the thread is saved to the database. For example, the current execution context of the thread is persistently stored by using JAVA serialization technology; after the second policy service finishes execution, the second server calls back the first server, obtains the current execution context of the saved thread from the database, awakens the risk control process, and continues to execute the subsequent process of the risk control process in the execution order. For example, the corresponding data is taken out from the persistent storage, and the thread execution context is restored by using JAVA deserialization technology. The current execution context of the thread includes the nodes of the risk control process currently executed by the thread, that is, the execution state of the current DAG. Saving the execution state of the current DAG to the database can obtain the execution state of the current DAG from the database after receiving the second decision result, so as to continue to execute the risk control process according to the execution state of the current DAG.

[0068] In an embodiment of the present invention, after interrupting the risk control process, it further includes: releasing the thread resources of the risk control process. After the risk control process is suspended, the context currently executed by the thread is saved, so that the thread resources can be released, enabling the thread to continue to execute other risk control processes and ensuring the availability of the first server.

[0069] In an embodiment of the present invention, the second server receives a call request through an asynchronous interface and returns a successful call result. The asynchronous interface is configured in the first server according to a preset interface specification. That is, the asynchronous interface is pre-configured according to the preset specification. The first server sends a call request to the second server through the asynchronous interface. The second server can receive the call request through the asynchronous interface and return a successful call result. After receiving the call request through the asynchronous interface, the second server starts an execution process and returns a successful call result. The asynchronous interface does not execute the second policy service nor return a second decision result. The asynchronous interface is used to evoke the execution process of the second server and quickly return a successful call result to ensure the high performance of the asynchronous interface, so as to realize the efficient call of the cloud risk control system to different local risk control systems. Among them, the preset specification is an asynchronous interface interaction specification defined by the first server, i.e., the cloud risk control system. The asynchronous interface can be an interface based on the HTTP protocol. The preset specification can include setting the basic configuration information and parameter configuration information of the asynchronous interface. The basic configuration information can include the interface type, interface name, and can also include a risk control scenario identifier; the parameter configuration information can include request input parameters, request output parameters, callback input parameters, and callback output parameters, etc. The call request can include information such as request input parameters and callback input parameters to obtain corresponding request output parameters and callback output parameters. The cloud risk control system realizes the configuration-based access of the asynchronous interface by defining the preset specification, improving the efficiency of docking different local risk control systems.

[0070] Another aspect of the embodiment of the present invention provides a method for risk control strategy management, including:

[0071] In response to receiving a call request sent by the first server, generating a second decision result; wherein, the call request is generated by the first server after receiving a decision request from the client. The first server obtains a first decision result by executing a risk control process corresponding to the decision request; the risk control process includes a first policy service, and the first decision result corresponds to the first policy service;

[0072] Returning the second decision result to the first server so that the first server determines a final decision result based on the first decision result and the second decision result.

[0073] In an embodiment of the present invention, the execution subject of the risk control strategy management method is a second server. The second server receives a call request sent by a first server, starts an execution process based on the call request, and at the same time returns a call success result to the first server. The call request is generated by the first server after receiving a decision request. The first server executes a corresponding risk control process based on the decision request. The risk control process includes a first policy service, and executing the first policy service obtains a corresponding first decision result. The first server interrupts the risk control process after receiving the call success result. After the second server starts the execution process, the execution process includes a second policy service, and a second decision result corresponding to the second policy service is obtained. The second server returns the second decision result to the first server, so that after the first server receives the second decision result, the risk control process is resumed, and the first server obtains a final decision result according to the first decision result and the second decision result and returns it to the client.

[0074] Figure 2 It is a schematic diagram of system interaction of a risk control decision management method according to an embodiment of the present invention. The business system sends a decision request to the cloud risk control system. After receiving the decision request, the cloud risk control system is connected in series with the local risk control system according to the DAG graph of the risk control process corresponding to the decision request, and executes the cloud policy service to obtain a cloud decision result. The cloud risk control system sends an HTTP call request to the local risk control system. After receiving the HTTP call request, the local risk control process starts and begins to execute. The local risk control system returns the result that the local risk control process starts to execute, that is, the result of successful execution, to the cloud risk control system. After receiving the result of successful execution, the cloud risk control system interrupts the risk control process of the thread, saves the current execution context of the thread (including the current execution state of the DAG) to the database, and releases the thread resources. The local risk control system asynchronously executes the local policy service. After obtaining a local decision result corresponding to the local policy service, it calls back the cloud risk control system and returns the local decision result. After receiving the local decision result, the cloud risk control system obtains the thread execution context, resumes the risk control process, and executes the final policy service, that is, obtains a final decision result according to the cloud decision result and the local decision result. The cloud risk control system returns the final decision result to the business system.

[0075] Figure 3It is a flowchart showing the method for risk control strategy management according to an embodiment of the present invention. A DAG graph of the risk control process corresponding to the risk control scenario is pre-constructed, that is, service orchestration is performed according to each service and the execution order of each service to construct the DAG graph. Each service includes a cloud policy service, an asynchronous service, and a final policy service. The business system sends a decision request to the cloud risk control system; after receiving the decision request from the business system, the cloud risk control system executes the DAG graph, executes the cloud policy service, and obtains the cloud policy result corresponding to the cloud policy service; then executes the asynchronous service. At the asynchronous service node, the cloud risk control system calls the asynchronous interface and sends a call request to the local risk control system. Herein, the cloud risk control system and the local risk control system interact through the cloud gateway and the local gateway; after receiving the call request, the local risk control system starts the local risk control process and returns the result of successful start to the cloud risk control system through the asynchronous interface; after receiving the result of successful start, the cloud risk control system exits the DAG graph, that is, suspends the risk control process and saves the current execution context of the thread, including the current execution state of the DAG graph; the local risk control system executes the local policy service to obtain the local decision result, calls back the local gateway, and returns the local decision result to the cloud risk control system. The local gateway calls back the cloud gateway, and the cloud gateway wakes up the risk control process, that is, restores the risk control process according to the current execution context of the thread; continues to execute the final policy service, that is, obtains the final decision result according to the cloud decision result and the local decision result; the cloud risk control system returns the final decision result to the business system in the form of a message queue.

[0076] For the method for risk control decision management according to an embodiment of the present invention, after receiving the decision request from the client, the corresponding risk control process is executed. By executing the first policy service, the first decision result corresponding to the first policy service is obtained; then a call request is generated and sent to the second server to call the second server to obtain the second decision result generated by the second server, and the final decision result is determined based on the first decision result and the second decision result and returned to the client business system. This method provides a risk control service in the cloud-ground combination mode in which the first server such as the cloud risk control system is connected in series with the second server such as the local risk control system; this method improves the implementation efficiency of the cloud-ground combined risk control service, reduces the risk of system resource exhaustion, and enhances the system stability by asynchronously executing the second policy service; this method improves the docking efficiency between the cloud risk control system and different local risk control systems by configuring the asynchronous interface according to the preset specification for calling the local risk control system; reduces the complexity of system interaction through the asynchronous service orchestration method; and this method supports the manual intervention mode of the local risk control system, with high flexibility.

[0077] According to another aspect of the embodiment of the present invention, as Figure 4 shown, a risk control decision management device 400 is provided, including:

[0078] The first acquisition module 401, in response to receiving a decision request from a client, executes a risk control process corresponding to the decision request. The risk control process includes a first policy service, and acquires a first decision result corresponding to the first policy service;

[0079] The second acquisition module 402 generates a call request and sends it to a second server, and acquires a second decision result generated by the second server;

[0080] The determination module 403 determines a final decision result according to the first decision result and the second decision result, and returns the final decision result to the client.

[0081] In an embodiment of the present invention, the second acquisition module 402 is further configured to: after generating a call request and sending it to the second server, in response to receiving a call success result corresponding to the call request returned by the second server, interrupt the risk control process;

[0082] The second acquisition module 402 is further configured to: after acquiring the second decision result generated by the second server based on the call request, resume the risk control process.

[0083] In an embodiment of the present invention, the first acquisition module 401 is further configured to: before executing the risk control process corresponding to the decision request, acquire each process node corresponding to the risk control process and the execution order of each process node;

[0084] Construct a process execution graph corresponding to the risk control process according to the execution order of each process node, so as to execute the risk control process according to the process execution graph;

[0085] Wherein, each process node includes: a first policy service node, an asynchronous interface node corresponding to the second server, and a final policy service node corresponding to the final decision result.

[0086] In an embodiment of the present invention, the second acquisition module 402 is further configured to: before generating a call request and sending it to the second server, determine that the risk control process executes the asynchronous interface node, so as to send the call request through the asynchronous interface node; in the case that the risk control process does not execute the asynchronous interface node, use the first decision result as the final decision result.

[0087] In an embodiment of the present invention, the second acquisition module 402 is further configured to: after interrupting the risk control process, store the current execution state of the process execution graph;

[0088] The second acquisition module 402 is further configured to: continue to execute the risk control process according to the current execution state of the process execution graph.

[0089] According to still another aspect of the embodiments of the present invention, there is provided a device for risk control decision management, including:

[0090] A generation module, in response to receiving a call request sent by a first server, generates a corresponding second decision result; wherein, the call request is generated by the first server after receiving a decision request from a client, and the first server obtains a first decision result by executing a risk control process corresponding to the decision request; the risk control process includes a first policy service, and the first decision result corresponds to the first policy service;

[0091] A sending module returns the second decision result to the first server, so that the first server returns the final decision result determined according to the first decision result and the second decision result to the client.

[0092] According to another aspect of the embodiments of the present invention, an electronic device is provided, including: one or more processors; a storage device for storing one or more programs, when the one or more programs are executed by the one or more processors, enabling the one or more processors to implement the risk control decision management method provided by the present invention.

[0093] According to still another aspect of the embodiments of the present invention, a computer-readable medium is provided, on which a computer program is stored, and when the program is executed by a processor, it implements the risk control decision management method provided by the present invention.

[0094] According to still another aspect of the embodiments of the present invention, a computer program product is provided, including a computer program, and when the computer program is executed by a processor, it implements the risk control decision management method provided by the present invention.

[0095] Figure 5 An exemplary system architecture 500 to which the risk control decision management method or the risk control decision management device of the embodiments of the present invention can be applied is shown.

[0096] As Figure 5 shown, the system architecture 500 may include terminal devices 501, 502, 503, a network 504, and a server 505. The network 504 is used to provide a medium for communication links between the terminal devices 501, 502, 503 and the server 505. The network 504 may include various connection types, such as wired, wireless communication links, or fiber optic cables, etc.

[0097] Users can use the terminal devices 501, 502, 503 to interact with the server 505 through the network 504 to receive or send messages, etc. Various communication client applications may be installed on the terminal devices 501, 502, 503, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only as examples).

[0098] The terminal devices 501, 502, and 503 can be various electronic devices with a display screen and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, and the like.

[0099] The server 505 can be a server that provides various services. For example, it can be a background management server (only for example) that supports shopping websites browsed by users using the terminal devices 501, 502, and 503. The background management server can analyze and process data such as product information query requests received, and feedback the processing results (such as target push information, product information - only for example) to the terminal devices.

[0100] It should be noted that the method for risk control decision management provided by the embodiments of the present invention is generally executed by the server 505. Correspondingly, the device for risk control decision management is generally arranged in the server 505.

[0101] It should be understood that Figure 5 the numbers of the terminal devices, network, and server in

[0102] are merely illustrative. According to the implementation requirements, there can be any number of terminal devices, network, and server. Figure 6 Figure 6

[0103] Figure 6 As

[0104] shown, the computer system 600 includes a central processing unit (CPU) 601, which can execute various appropriate actions and processes according to the program stored in the read-only memory (ROM) 602 or the program loaded from the storage section 608 into the random access memory (RAM) 603. In the RAM 603, various programs and data required for the operation of the system 600 are also stored. The CPU 601, ROM 602, and RAM 603 are connected to each other through a bus 604. The input / output (I / O) interface 605 is also connected to the bus 604.

[0104] The following components are connected to the I / O interface 605: an input section 606 including a keyboard, a mouse, etc.; an output section 607 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc. and a speaker, etc.; a storage section 608 including a hard disk, etc.; and a communication section 609 including a network interface card such as a LAN card, a modem, etc. The communication section 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to the I / O interface 605 as required. A removable medium 611 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc. is mounted on the drive 610 as required so that a computer program read therefrom is installed into the storage section 608 as required.

[0105] Specifically, according to the embodiments disclosed in the present invention, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, the embodiments disclosed in the present invention include a computer program product which includes a computer program carried on a computer-readable medium, and the computer program includes program codes for performing the methods shown in the flowcharts. In such an embodiment, the computer program can be downloaded and installed from a network via the communication section 609, and / or installed from the removable medium 611. When the computer program is executed by a central processing unit (CPU) 601, the above-described functions defined in the system of the present invention are executed.

[0106] It should be noted that the computer-readable medium shown in the present invention can be a computer-readable signal medium, a computer-readable storage medium, or any combination of the two. A computer-readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the above. More specific examples of a computer-readable storage medium can include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present invention, a computer-readable storage medium can be any tangible medium that contains or stores a program, which can be used by or in conjunction with an instruction execution system, apparatus, or device. In the present invention, a computer-readable signal medium can include a data signal propagated in a baseband or as part of a carrier wave, which carries computer-readable program code. Such a propagated data signal can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. A computer-readable signal medium can also be any computer-readable medium other than a computer-readable storage medium, which can send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device. The program code contained on a computer-readable medium can be transmitted using any appropriate medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.

[0107] The flowcharts and block diagrams in the accompanying drawings illustrate the possible architectures, functions, and operations of systems, methods, and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagram can represent a module, a program segment, or a part of code that contains one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions marked in the blocks can occur in a different order than that marked in the accompanying drawings. For example, two consecutive blocks shown can actually be executed substantially in parallel, and they can sometimes be executed in the reverse order, depending on the functions involved. It should also be noted that each block in the block diagram or flowchart, and the combination of blocks in the block diagram or flowchart, can be implemented by a dedicated hardware-based system that performs the specified functions or operations, or can be implemented by a combination of dedicated hardware and computer instructions.

[0108] The modules involved in the embodiments of the present invention can be implemented in software or in hardware. The described modules can also be provided in a processor. For example, it can be described as: a processor includes a first acquisition module, a second acquisition module, and a determination module. Among them, the names of these modules do not constitute a limitation to the module itself in some cases. For example, the second acquisition module can also be described as "a module that generates a call request and sends it to a second server to obtain a second decision result generated by the second server".

[0109] As another aspect, the present invention also provides a computer-readable medium, which can be included in the device described in the above embodiments; or it can exist separately without being assembled into the device. The above computer-readable medium carries one or more programs. When the one or more programs are executed by the device, the device includes: in response to receiving a decision request from a client, executing a risk control process corresponding to the decision request, the risk control process including a first policy service, and obtaining a first decision result corresponding to the first policy service; generating a call request and sending it to a second server, and obtaining a second decision result generated by the second server based on the call request; determining a final decision result according to the first decision result and the second decision result, and returning the final decision result to the client.

[0110] According to the technical solution of the embodiments of the present invention, after receiving a decision request from a client, execute the corresponding risk control process, obtain a first decision result corresponding to the first policy service by executing the first policy service; then generate a call request and send it to the second server to call the second server to obtain a second decision result generated by the second server, and determine the final decision result based on the first decision result and the second decision result, and return it to the client business system. This method provides a risk control service in a cloud-ground combination mode in which a first server such as a cloud risk control system is connected in series with a second server such as a local risk control system; this method improves the efficiency of risk control implementation in the cloud-ground combination by asynchronously executing the second policy service, reduces the risk of system resource exhaustion, and improves system stability; this method improves the docking efficiency between the cloud risk control system and different local risk control systems by configuring asynchronous interfaces according to preset specifications to call the local risk control system; reduces the complexity of system interaction through asynchronous service orchestration; and this method supports the manual intervention mode of the local risk control system, with high flexibility.

[0111] The above specific embodiments do not constitute a limitation to the protection scope of the present invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can occur depending on design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for risk control decision management, characterized in that, include: In response to receiving a decision request from a client, executing a risk control process corresponding to the decision request, the risk control process including a first policy service, and obtaining a first decision result corresponding to the first policy service; Generate a call request and send it to a second server, and obtain a second decision result generated by the second server based on the call request; A final decision result is determined according to the first decision result and the second decision result, and the final decision result is returned to the client.

2. The method according to claim 1, characterized in that After generating the call request and sending it to the second server, the method further includes: in response to receiving a call success result corresponding to the call request returned by the second server, interrupting the risk control process; After obtaining the second decision result generated by the second server based on the call request, it also includes: resuming the risk control process.

3. The method according to claim 1, characterized in that Before executing the risk control process corresponding to the decision request, the following steps are included: Obtaining each process node corresponding to the risk control process and the execution order of each process node; Constructing a process execution graph corresponding to the risk control process according to the execution order of each process node, so as to execute the risk control process according to the process execution graph; The various process nodes include: a first policy service node, an asynchronous interface node corresponding to the second server, and a final policy service node corresponding to the final decision result.

4. The method according to claim 3, characterized in that Before generating a call request and sending it to the second server, the following steps are also included: Determining that the risk control process executes the asynchronous interface node, so as to send the call request through the asynchronous interface node; When the risk control process does not execute the asynchronous interface node, the first decision result is used as the final decision result.

5. The method according to claim 2, characterized in that, After interrupting the risk control process, the method further includes: storing the current execution state of the process execution graph; Restoring the risk control process includes: continuing to execute the risk control process according to the current execution state of the process execution diagram.

6. A method for risk control strategy management, characterized in that: include: generating a second decision result in response to receiving a call request sent by a first server; wherein the call request is generated by the first server after receiving a decision request from a client, and the first server obtains the first decision result by executing a risk control process corresponding to the decision request; the risk control process includes a first policy service, and the first decision result corresponds to the first policy service; The second decision result is returned to the first server, so that the first server determines a final decision result according to the first decision result and the second decision result.

7. A device for risk control decision management, characterized in that, include: a first acquisition module, in response to receiving a decision request from a client, executing a risk control process corresponding to the decision request, the risk control process including a first policy service, and acquiring a first decision result corresponding to the first policy service; A second acquisition module generates a call request and sends it to a second server to obtain a second decision result generated by the second server; A determination module determines a final decision result according to the first decision result and the second decision result, and returns the final decision result to the client.

8. A device for risk control decision management, characterized in that: include: a generation module, in response to receiving a call request sent by a first server, generating a corresponding second decision result; wherein the call request is generated by the first server after receiving a decision request from a client, the first server obtains the first decision result by executing a risk control process corresponding to the decision request, the risk control process includes a first policy service, and the first decision result corresponds to the first policy service; A sending module returns the second decision result to the first server, so that the first server returns a final decision result determined according to the first decision result and the second decision result to the client.

9. An electronic device, characterized in that, include: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 6.

10. A computer-readable medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

11. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the method according to any one of claims 1 to 6 is implemented.

Images