Data processing method, device and equipment

Abstract

The embodiment of the invention discloses a data processing method, device and equipment, and the method comprises the steps: receiving a safety education request for a target object, enabling the safety education request to be received when the target object does not encounter a risk event in business processing, and enabling the safety education request to comprise risk portrait information of the target object, the risk portrait information comprises one or more of attribute information of a target object, belonging business category information and risk level information; in response to the safety education request, obtaining safety education data for the target object from a database matched with the risk portrait information of the target object based on the risk portrait information of the target object; and pushing the acquired safety education data to the target object so as to carry out safety education on the target object for risks existing in business processing.

Description

Technical Field

[0001] This document relates to the field of computer technology, and in particular to a data processing method, apparatus, and device. Background Technology

[0002] Security risks may arise from the actions of certain entities (such as merchants, users, or technical personnel) on a certain platform. For example, when merchants operate on a certain platform, they may encounter security risks such as fund security risks, content security risks of mini-program merchants, and excessive collection of mini-program privacy data due to their business operations such as order taking and mini-program release.

[0003] Currently, the handling of the aforementioned security risks typically occurs during or after a risk event. However, the security education data obtained by the target group in these methods is only associated with the risk event that occurred at that time. Moreover, control measures are only taken against merchants and other entities after the risk event occurs, requiring them to provide relevant proof to mitigate the corresponding risks, thus hindering their business operations. Therefore, there is a need for a technical solution that can improve the security education of merchants and other entities, help them build security risk awareness, understand security risk events, and assist them in avoiding risk events in their business operations. Summary of the Invention

[0004] The purpose of the embodiments in this specification is to provide a technical solution that can enhance the security education of merchants and other entities, help them establish security risk awareness, understand security risk events, and assist them in avoiding risk events in their business operations.

[0005] To achieve the above technical solution, the embodiments in this specification are implemented as follows: This specification provides a data processing method, comprising: receiving a security education request for a target object, wherein the security education request is received when the target object has not encountered any risk events in its business processing, the security education request including risk profile information of the target object, the risk profile information including one or more of the following: attribute information of the target object, business category information, and risk level information; responding to the security education request, based on the risk profile information of the target object, retrieving security education data for the target object from a database that matches the risk profile information of the target object; and pushing the retrieved security education data to the target object to provide security education to the target object regarding risks existing in its business processing.

[0006] This specification provides a data processing device comprising: an education content configuration module, a basic education module, and an education deployment module. The education content configuration module is configured to generate corresponding safety education data based on risk profile information of different objects. The risk profile information includes one or more of the following: attribute information, business category information, and risk level information of different objects. The basic education module is configured to receive safety education requests for target objects. These requests are received when the target object has not encountered any risk events in its business processes. The safety education requests include risk profile information of the target object, which includes one or more of the following: attribute information, business category information, and risk level information of the target object. In response to the safety education request, the module retrieves safety education data for the target object from a database matching the target object's risk profile information. The education deployment module is configured to push the retrieved safety education data to the target object to provide safety education to the target object regarding risks present in its business processes.

[0007] This specification provides an embodiment of a data processing device, comprising: a processor; and a memory arranged to store computer-executable instructions, wherein, when executed, the executable instructions cause the processor to: receive a security education request for a target object, the security education request being received when the target object has not encountered a risk event in its business processing, the security education request including risk profile information of the target object, the risk profile information including one or more of the target object's attribute information, its business category information, and risk level information; responding to the security education request, based on the target object's risk profile information, retrieving security education data for the target object from a database matching the target object's risk profile information; and pushing the retrieved security education data to the target object to provide security education to the target object regarding risks existing in its business processing.

[0008] This specification also provides a storage medium for storing computer-executable instructions. When executed by a processor, the executable instructions implement the following process: receiving a security education request for a target object, wherein the security education request is received when the target object has not encountered any risk events in its business processing, and the security education request includes risk profile information of the target object, which includes one or more of the following: attribute information of the target object, business category information, and risk level information; responding to the security education request, based on the risk profile information of the target object, retrieving security education data for the target object from a database that matches the risk profile information of the target object; and pushing the retrieved security education data to the target object to provide security education to the target object regarding risks existing in its business processing.

[0009] This specification also provides a computer program product, including a computer program that, when executed by a processor, implements the following process: receiving a security education request for a target object, wherein the security education request is received when the target object has not encountered any risk events in its business processing, and the security education request includes risk profile information of the target object, the risk profile information including one or more of the target object's attribute information, its business category information, and risk level information; responding to the security education request, based on the risk profile information of the target object, retrieving security education data for the target object from a database that matches the risk profile information of the target object; and pushing the retrieved security education data to the target object to provide security education to the target object regarding risks existing in its business processing. Attached Figure Description

[0010] To more clearly illustrate the technical solutions in the embodiments or prior art of this specification, the drawings used in the description of the embodiments or prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this specification. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort. Figure 1 This is a schematic diagram of the structure of a data processing system described in this specification; Figure 2 This is a schematic diagram of a data processing procedure described in this specification; Figure 3 This is a schematic diagram illustrating a data processing procedure including data conversion, as described in this specification. Figure 4 This is a schematic diagram of a data processing device described in this specification; Figure 5 This is a schematic diagram of another data processing device described in this specification; Figure 6 This is a schematic diagram of a data processing device described in this specification. Detailed Implementation

[0011] This specification provides a data processing method, apparatus, and device through its embodiments.

[0012] To enable those skilled in the art to better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this specification, and not all embodiments. Based on the embodiments in this specification, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of this specification.

[0013] This specification provides a security education mechanism for merchants and other entities. Certain entities (such as merchants, users, or technical personnel) may encounter security risks when operating on a certain platform. Taking merchants as an example, when merchants operate on a certain platform, they may encounter security risks due to business operations such as order taking and launching mini-programs (such as fund security risks (specifically, fraud risks, illegal financial activity risks, etc.), mini-program merchant content security risks, mini-program data security risks (such as data leakage risks, etc.), and mini-program privacy risks (excessive collection of privacy data, etc.)).

[0014] Currently, the handling of the aforementioned security risks typically occurs during or after a risk event. However, the security education data received by the target group in these methods is only related to the risk event that occurred at that time, and does not include other risks that the target group may face in its operations. Moreover, control measures are only taken against merchants and other entities after a risk event occurs, requiring them to provide relevant proof to release the risks corresponding to that event, thereby hindering their business operations. Historical complaint data reveals that merchants generally lack understanding of "what is a security risk," "why there are restrictions," and "how to avoid complaints," indicating a weak security awareness among merchants. It is necessary to improve merchants' security education to help them avoid risk events in their business operations.

[0015] Therefore, this embodiment aims to help merchants and other entities conduct business operations more safely. It establishes a security education system that combines the multi-dimensional attributes of the target entities based on one or more of their attribute information, business category information, and risk level information. Before a risk occurs, it provides regular and targeted security education data based on one or more of the target entity's attribute information, business category information, and risk level information to help the target entities develop security risk awareness and understand security risk events. This embodiment provides an achievable technical solution; specific processing details can be found in the following embodiments.

[0016] The data processing methods provided in one or more embodiments of this specification are applicable to the data processing implementation environment. (Refer to...) Figure 1 The implementation environment includes at least: Client 100 and server 200, where: Client 100 can run on terminal devices, which can be mobile phones, personal computers, tablets, e-book readers, wearable devices, devices that interact with information based on AR (Augmented Reality) and VR (Virtual Reality), and laptop computers, etc. Client 100 can be installed on terminal devices. Client 100 can be an application, a browser, or a subroutine embedded in an application, etc.

[0017] Server 200 can run on a server, which can be one or more servers, a server cluster consisting of several servers, or a cloud server on a cloud computing platform. Server 200 can be installed on the server, and server 200 can be an application or a subroutine embedded in an application.

[0018] In addition, it may include a database 300, which may be located on the server on which the server 200 runs, or outside the server on which the server 200 runs. The database 300 may store data related to risk assessment and risk prevention.

[0019] In this implementation environment, server 200 can receive a security education request for a target object sent by client 100. This security education request is received when the target object has not encountered any risk events in its business processing. The security education request includes the target object's risk profile information, which includes one or more of the target object's attribute information, its business category information, and risk level information. In response to the security education request, server 200 retrieves security education data for the target object from a database that matches the target object's risk profile information based on the target object's risk profile information. Finally, the server pushes the retrieved security education data to the target object to provide security education for the target object regarding the risks present in its business processing.

[0020] like Figure 2 As shown in the embodiments of this specification, a data processing method is provided. The execution subject of this method can be a terminal device or a server, etc. The terminal device can be a mobile terminal device such as a mobile phone or tablet computer, or a computer device such as a laptop or desktop computer, or an IoT device (specifically, a smartwatch, in-vehicle device, etc.). The server can be a single server or a server cluster composed of multiple servers, etc. The server can be a backend server for financial business or online shopping business, or a backend server for an application, etc. This embodiment uses a server as the execution subject for detailed description. For the case where the execution subject is a terminal device, please refer to the following server case processing, which will not be repeated here. The method may specifically include the following steps: In step S202, a security education request for the target object is received. This security education request is received when the target object has not encountered any risk events in its business processing. The security education request includes the risk profile information of the target object, which includes one or more of the target object's attribute information, its business category information, and risk level information.

[0021] The target object can be various, such as a merchant or user (shopper) on a shopping platform, a technical personnel, a designated person or group, etc., depending on the specific circumstances. The business processing can be any business process that the target object can perform, such as payment processing, wealth management processing, or shopping processing, etc., depending on the specific circumstances. The target object's attribute information can be various. For example, if the target object is a merchant, its attribute information can be business attribute information, such as business type, business behavior information, and potential security risks during operation. The business type can be various, such as acquiring merchants, content display merchants, and data interaction merchants, etc., depending on the specific circumstances. The target object's business category information can be various. For example, if the target object is a merchant, its business category information could be offline payment QR code merchants, license service merchants, or healthcare merchants, etc., depending on the specific circumstances. The risk level information of the target object can include various factors. For example, if the target object is a merchant, the risk level information could be, for instance, a merchant with the lowest level of illegal financial activity risk or a merchant with the lowest level of fraud risk. Furthermore, the risk level information can include current risk level information, historical risk level information, or one of both, depending on the specific circumstances. A risk event can be any event that carries a specified risk, such as a fraud risk event in payment transactions or an illegal financial activity risk event in transfer transactions. The specific risk level information can also be set according to the actual situation.

[0022] In practice, security education bases for target groups can be built through applications on terminal devices. For example, security education bases for target groups (such as merchants) can be built in corresponding applications on computers (including desktop computers, laptops, tablets, etc.) and mobile devices. Specifically, the security center service number provided in the payment application installed on the mobile device can serve as the content hub, updating one or more security education information each time the user launches the payment application or updating the security education information once a day. Based on the above, security education processing can be triggered via data access. Specifically, a user, merchant, or technician (i.e., the target) can initiate a security education request through an application that has deployed the above processing mechanism (i.e., triggering security education processing via data access). Specifically, when the target launches an application with the above processing mechanism deployed or opens a designated page within that application, the application can obtain relevant information about the target (such as the target's identifier (e.g., name, code, etc.), as well as one or more of the target's attribute information (e.g., business type, business behavior information, potential security risks in operation, etc.), business category information, and risk level information). Based on the obtained information, the application can generate a security education request for the target and send it to the server. The server can then receive the security education request for the target. In practical applications, with the target's authorization, the above processing mechanism can be deployed to multiple different applications or clients. This allows users, merchants, or technicians to use it across platforms, seamlessly linking the target's behavior and ensuring the consistency and comprehensiveness of security education.

[0023] It should be noted that the aforementioned security education request for the target object can be received before the target object encounters any risk event, or after the target object encounters any risk event. It can also be a security education request for the target object automatically triggered by the application at a specified period (i.e., when the specified period arrives, the application can obtain the above information to generate a security education request for the target object), or it can be a security education request for the target object automatically triggered by the application at irregular or random intervals, etc. The specific settings can be configured according to the actual situation.

[0024] In step S204, in response to the aforementioned safety education request, safety education data for the target object is obtained from a database that matches the risk profile information of the target object, based on the risk profile information of the target object.

[0025] The database can be constructed based on security education data corresponding to different risk profiles, or it can be constructed based on the relationship between relevant information about the object, risk profile information, and security education data, etc., depending on the actual situation. Security education data can be data used to educate target objects about risks present in business processes. Security education data can include various types, and the corresponding security education data can differ depending on the scenario or business. For example, for financial scenarios or businesses such as payment services, security education data can include how to identify fraud risks, how to avoid triggering fraud risk mechanisms in transactions, how to protect user privacy data, and rules for authorizing the use of user privacy data. For shopping services or online shopping scenarios, security education data can include compliance rules, regulatory rules, laws and regulations for the goods or services provided, etc., depending on the actual situation.

[0026] In implementation, the server can connect to a specified database or have the database set up within the server. There can be one or multiple databases. The server can then parse the security education request to determine the relevant information of the target object (such as the target object's identifier) ​​and its risk profile information. Then, it can search the database for matching security education data based on the target object's risk profile information. For example, if the target object's risk profile information includes its attribute information, such as being a merchant acquiring a transaction, then the database can be searched for security education data matching that merchant. Specifically, if the database stores security education data for a single merchant type, including how to identify fraud risks, how to avoid triggering fraud risk mechanisms in transactions, cases of illegal financial activities, and methods for preventing illegal financial activities, then this security education data can be used as the target object's security education data.

[0027] For example, if the risk profile information of a target object includes its attribute information, business category information, and risk level information, then this information can be integrated and analyzed to determine the risk information related to the target object, the information the target object needs to pay attention to, the key information related to the current business, and the risk information the target object is already aware of. Based on the information determined above, matching safety education data can be queried from the database, and the retrieved safety education data can be used as safety education data for the target object. If the risk profile information of a target object includes multiple aspects of the target object's attribute information, business category information, and risk level information, then this information can be integrated and analyzed to generate hierarchical safety education data, which can be continuously updated and stored in the aforementioned database. This allows for subsequent queries of corresponding hierarchical safety education data based on the multiple pieces of information. Furthermore, when the target object's attribute information, business category information, and risk level information change during business operations, new, adapted safety education data can be provided to help the target object understand the relevant data in advance, thereby forming a more dynamic, accurate, and comprehensive safety education system and reducing the possibility of risk events occurring during business operations. In this way, different safety education data can be obtained by combining multiple dimensions such as the target's business behavior, potential safety risks in business operations, business category information, and risk level information. This covers the safety risks that the target may have in business processes, and the safety education content is multifaceted and multi-dimensional.

[0028] In step S206, the acquired safety education data is pushed to the target object to provide safety education to the target object regarding the risks existing in the business process.

[0029] In implementation, the acquired safety education data can be pushed to the target audience. Terminal devices or applications can display the acquired safety education data to the target audience in a preset area of ​​a designated page. By viewing this safety education data, the target audience can improve their awareness and understanding of the risks and rules in business processes, thus providing a better theoretical basis for subsequent business processes. In this way, through the above process, safety education data can be provided to the target audience before they encounter risk events, and it can be regularly uploaded to designated channels to cultivate the target audience's learning habits, transforming passive learning into active learning, and increasing the target audience's enthusiasm for safety education, thereby reducing the occurrence of risk events.

[0030] This specification provides a data processing method that receives a security education request for a target object when the target object has not encountered any risk events in its business operations. The security education request includes the target object's risk profile information, which includes one or more of the target object's attribute information, its business category information, and risk level information. Then, in response to the security education request, based on the target object's risk profile information, security education data for the target object is retrieved from a database matching the target object's risk profile information. Finally, the retrieved security education data can be pushed to the target object to provide security education on risks present in its business operations. This method combines multiple dimensions, such as the target object's business behavior, potential security risks in its operations, its business category information, and risk level information, to obtain different security education data covering potential security risks in the target object's business operations. The security education content is multifaceted and multi-dimensional. Furthermore, security education data can be provided to the target object before it encounters a risk event and is regularly uploaded to designated channels to cultivate the target object's learning habits, shifting from passive to active learning and increasing the target object's enthusiasm for security education, thereby reducing the occurrence of risk events.

[0031] In practical applications, the risk profile information of the target object includes the target object's attribute information, which includes acquiring merchants. Based on this, the database described above can be constructed through the following steps A2 and A4.

[0032] In step A2, risk case information and preventive measures information for the first preset risk existing in the business process are obtained. The first preset risk includes one or more of the following: theft risk, fraud risk, and illegal financial activity risk.

[0033] Among these, the risk of illegal financial activities can refer to the risk of activities that involve concealing, disguising, or transforming the illegal proceeds obtained from illegal activities to make them appear legitimate. Information on preventative measures for pre-existing risks can include information on preventative measures taken to eliminate pre-existing risks. This information can encompass various aspects, such as the characteristics of the pre-existing risk, its occurrence pathways, and prevention methods, and can be tailored to the specific circumstances.

[0034] In implementation, risk case information and preventive measures information for the first pre-set risk existing in business processing can be obtained in various ways. For example, risk case information and corresponding preventive measures information for the first pre-set risk existing in business processing can be obtained from a designated database. Alternatively, the current business system can record relevant data generated by different users or merchants during the execution of designated business processes, and can also record user or merchant complaint information and the process information for resolving the complaint. Corresponding preventive measures can be formulated for the risk corresponding to the complaint (i.e., the first pre-set risk). When it is necessary to obtain risk case information and preventive measures information for the first pre-set risk, the risk case information and preventive measures information for the first pre-set risk existing in business processing can be obtained from the data stored in the above-mentioned business system. Alternatively, publicly available risk case information and preventive measures information for the first pre-set risk existing in business processing can be crawled from the Internet using web crawlers. The specific settings can be configured according to the actual situation.

[0035] In step A4, a database corresponding to the attribute information of the target object is constructed based on the risk case information and the preventive measures information of the first preset risk.

[0036] In practice, the information obtained above can be stored in the database corresponding to the attribute information of the target object. Subsequently, when it is necessary to conduct safety education for the target object, the risk case information and the preventive measures information of the first preset risk can be obtained from the database corresponding to the attribute information of the target object in the safety education request, and the target object can be trained accordingly.

[0037] In practical applications, the risk profile information of the target object includes the target object's attribute information, which includes content display mini-program merchants. Based on this, the database described above can be constructed through the following steps B2 and B4.

[0038] In step B2, information related to the second preset risk existing in the business process is obtained. The second preset risk includes one or more of the following: risks in the version management of content display mini-programs, product and / or service compliance risks, and risks involving specified sensitive data.

[0039] The specified sensitive data can include various types, such as specified keywords or statements, which can be set according to the actual situation. A mini-program can be an application hosted within a host program, and its operation relies on the runtime environment provided by the host program.

[0040] In implementation, information related to the second pre-set risk existing in business processing can be obtained in various ways. For example, information related to the second pre-set risk existing in business processing can be obtained from a specified database. Alternatively, the current business system can record relevant data generated by different users or merchants during the execution of specified business processes, as well as user or merchant complaint information and information on the process of resolving such complaints. When it is necessary to obtain information related to the second pre-set risk, it can be obtained from the data stored in the aforementioned business system. Alternatively, publicly available information related to the second pre-set risk existing in business processing can be crawled from the Internet using web crawlers. The specific method can be set according to the actual situation.

[0041] In step B4, a database corresponding to the attribute information of the target object is constructed based on the acquired second preset risk-related information.

[0042] In practice, the information obtained above can be stored in the database corresponding to the attribute information of the target object. Subsequently, when it is necessary to conduct safety education for the target object, the attribute information of the target object in the safety education request can be used to obtain the second preset risk-related information from the database corresponding to the attribute information of the target object, and the target object can be used for safety education.

[0043] In practical applications, the risk profile information of the target object includes the target object's attribute information, which includes data interaction mini-program merchants. Based on this, the database described above can be constructed through the following steps C2 and C4.

[0044] In step C2, information related to a third pre-set risk existing in the business process is obtained. The third pre-set risk includes one or more of the following: risks in data security incident handling, risks in employee security training, risks in vulnerability remediation, and risks in personal privacy authorization specifications.

[0045] In implementation, information related to third-party pre-set risks existing in business processes can be obtained in various ways. For example, information related to third-party pre-set risks existing in business processes can be obtained from a specified database. Alternatively, the current business system can record relevant data generated by different users or merchants during the execution of specified business processes, as well as user or merchant complaint information and information on the process of resolving such complaints. When it is necessary to obtain information related to third-party pre-set risks, it can be obtained from the data stored in the aforementioned business system. Alternatively, it can be obtained by crawling web crawlers to retrieve publicly available information related to third-party pre-set risks existing in business processes from the Internet. The specific settings can be configured according to the actual situation.

[0046] In step C4, a database corresponding to the attribute information of the target object is constructed based on the acquired third preset risk-related information.

[0047] In practice, the information obtained above can be stored in the database corresponding to the attribute information of the target object. Subsequently, when it is necessary to conduct safety education for the target object, the attribute information of the target object in the safety education request can be used to obtain the third preset risk-related information from the database corresponding to the attribute information of the target object, and the target object can be used for safety education.

[0048] Based on the processing of steps A2 and A4, B2 and B4, and C2 and C4 above, the business category information contained in the risk profile information can also be used to construct a corresponding database in the same or similar manner. For example, for merchants whose business category information is offline payment QR code, the database corresponding to the business category information can be constructed using the processing of steps A2 and A4 above; for merchants whose business category information is license service provider, the database corresponding to the business category information can be constructed using the processing of steps B2 and B4 above; and for merchants whose business category information is medical and health service provider, the database corresponding to the business category information can be constructed using the processing of steps C2 and C4 above. The above are only exemplary and optional processing methods. In practical applications, various other methods can be used to construct specific databases, which can be set according to the actual situation. This specification does not limit this embodiment. In addition, the risk level information contained in the risk profile information can also be used to construct a corresponding database in the same or similar manner as above. For details, please refer to the foregoing content, which will not be repeated here. For the aforementioned target objects, including attribute information, business category information, and risk level information, multi-dimensional information can be dynamically generated into hierarchical and differentiated safety education data, which can be stored in the corresponding database and continuously updated regularly or irregularly.

[0049] In practical applications, when a target object encounters a risk event during business processing, advanced safety education can be conducted on the target object through the following steps D02 to D10.

[0050] In step D02, when a risk event is detected in the business process of the target object, the risk event encountered by the target object is analyzed to determine the cause information of the risk event encountered by the target object.

[0051] Among them, a risk event can be any event corresponding to a risk, such as a risk event corresponding to fraud risk, a risk event corresponding to illegal financial activity risk, etc. Causal information can include information related to the causes and mechanisms of the risk event.

[0052] In step D04, based on the determined cause information, a handling rule for the risk events encountered by the target object is determined, and the risk events encountered by the target object are handled based on the handling rule.

[0053] Among them, the handling rules can be the rules of the operation process used to resolve the risk corresponding to the risk event. The handling rules can vary depending on the risk event, and the handling rules for the same risk event can also be different at different times. The specific rules can be set according to the actual situation.

[0054] In step D06, based on the determined cause information and the above-mentioned handling rules, preventive measures are constructed for the risk events encountered by the target object.

[0055] In implementation, the identified causal information and the aforementioned handling rules can be directly used as preventive measures against risk events encountered by the target object. Alternatively, the identified causal information and the aforementioned handling rules can be integrated to make the final content more suitable for the target object to understand and accept. The integrated information can be used as preventive measures against risk events encountered by the target object. Other methods can also be used to construct preventive measures against risk events encountered by the target object, which can be set according to the actual situation.

[0056] In step D08, based on the determined cause information, handling rules and preventive measures, target safety education data for the target object is generated.

[0057] In implementation, the identified causal information, handling rules, and preventive measures can be directly used as target safety education data for the target audience. Alternatively, the identified causal information, handling rules, and preventive measures can be integrated to make the final content more concise and suitable for the target audience to understand and accept. The integrated information can be used as target safety education data for the target audience. Target safety education data for the target audience can also be constructed through other methods, which can be set according to the actual situation.

[0058] In step D10, target security education data is pushed to the target object to provide security education to the target object in response to risk events encountered in business processing.

[0059] Through the processing of steps D02 to D10 above, when the target object encounters a risk event in business processing, a complete education chain of risk cause analysis, handling rules, and preventive measures can be formed to provide advanced safety education to the target object in response to risks. This can help the target object to deeply analyze the risk occurrence mechanism, master the practical solutions for risk mitigation, and establish a long-term risk prevention and control mechanism. Through the closed-loop management of event response and education reinforcement, the risk recurrence rate can be effectively reduced.

[0060] In practical applications, the specific processing method of step D10 can vary. The following provides another optional processing method, which may include the processing of steps D102 to D106.

[0061] In step D102, a safety education upgrade notification is sent to the target object.

[0062] In practice, when a risk event occurs, a safety education upgrade notification can be promptly sent to the target group via system messages, SMS, email, telephone, push notifications, etc., to notify the target group to complete the safety education upgrade.

[0063] In step D104, a security education upgrade request corresponding to the security education upgrade notification is received from the target object.

[0064] In step D106, the target safety education data is pushed to the target object.

[0065] In practical applications, the specific processing method of step S206 can vary. The following provides another optional processing method, which may specifically include the processing of steps S2062 and S2064. Based on this, in the above... Figure 2 Based on this, the specific steps included in this method can be as follows: Figure 3 As shown.

[0066] In step S2062, the acquired safety education data is converted into safety education data in a preset data format, which includes one or more of the following: images, text, videos, live data, and question-and-answer data.

[0067] In implementation, for example, the acquired safety education data can be converted into image + text format, or into video + text format, or into question-and-answer format, etc. The specific settings can be configured according to the actual situation.

[0068] In step S2064, the safety education data, converted into a preset data format, is pushed to the target object.

[0069] Based on the above processing, the process of pushing target safety education data to the target object can also be as follows: convert the target safety education data into target safety education data in a preset data format, which includes one or more of images, text, videos, live data, and question-and-answer data; push the target safety education data converted into the preset data format to the target object. For details of the specific processing, please refer to the aforementioned related content, which will not be repeated here.

[0070] In practical applications, safety education data includes one or more of the following: safety information education data, safety course education data, and safety white paper education data.

[0071] If the safety education data includes safety information education data, which includes one or more of the following: regulatory policy data, legal and regulatory data, and industry dynamic data, then the specific processing method of the above step S2062 can be varied. The following provides another optional processing method, which may include: converting the acquired safety education data into one or more data forms such as images, text, and videos.

[0072] In practice, for example, the acquired safety education data can be converted into a combination of images and text, or into a combination of images, text, and video. In this way, the safety education data in these forms can be provided to the target audience with selected industry information for a certain period (such as weekly or monthly) to help them understand the latest regulatory and platform developments.

[0073] If the safety education data includes safety course-type education data, which includes one or more of the following: safety case data, case analysis data, rule interpretation data, and regulatory analysis data, then the specific processing method of the above step S2062 can be varied. Here is another optional processing method, which may include: converting the acquired safety education data into short video data, and using the short video data as safety education data converted into a preset data format.

[0074] In practice, safety education data in the form of short videos can be provided to the target audience so that they can use their spare time to learn about recent risk cases, raise awareness of their own business operations, and avoid the same risks from occurring.

[0075] If the safety education data includes safety white paper-type education data, and the safety white paper-type education data includes safety capability data, then the specific processing method of the above step S2062 can be varied. The following provides another optional processing method, which may include: converting the acquired safety education data into graphic data, and using the graphic data as safety education data converted into a preset data format.

[0076] In practice, the acquired security education data can be converted into graphic data (i.e., data in the form of images and text) and provided to the target audience. In this way, the security education data is presented to the target audience in the form of graphic manuals, which can help the target audience understand the latest security technology capabilities and defense tool configuration guidelines, and configure corresponding security capabilities to resist corresponding risks in daily business operations.

[0077] Based on the above approach, in addition to using quizzes to educate the target audience about safety, safety education can also be conducted through short videos, graphic education, and safety news, taking into account the public's current reading habits. Furthermore, dynamic and interactive educational methods such as live streaming and community activities can be used to allow the target audience to interact with the business platform and learn safety knowledge more effectively.

[0078] This specification provides a data processing method that receives a security education request for a target object when the target object has not encountered any risk events in its business operations. The security education request includes the target object's risk profile information, which includes one or more of the target object's attribute information, its business category information, and risk level information. Then, in response to the security education request, based on the target object's risk profile information, security education data for the target object is retrieved from a database matching the target object's risk profile information. Finally, the retrieved security education data can be pushed to the target object to provide security education on risks present in its business operations. This method combines multiple dimensions, such as the target object's business behavior, potential security risks in its operations, its business category information, and risk level information, to obtain different security education data covering potential security risks in the target object's business operations. The security education content is multifaceted and multi-dimensional. Furthermore, security education data can be provided to the target object before it encounters a risk event and is regularly uploaded to designated channels to cultivate the target object's learning habits, shifting from passive to active learning and increasing the target object's enthusiasm for security education, thereby reducing the occurrence of risk events.

[0079] Furthermore, when target users encounter risk events in their business operations, a complete educational chain can be formed, encompassing risk cause analysis, handling rules, and preventative measures. This allows for advanced safety education tailored to the specific risks encountered, helping target users deeply understand the mechanisms of risk occurrence, master practical risk mitigation solutions, and establish long-term risk prevention and control mechanisms. Through closed-loop management of event response and education reinforcement, the recurrence rate of risks can be effectively reduced. In addition, based on current reading habits, safety education can be conducted through short videos, graphic education, and safety information. Moreover, dynamic and interactive educational methods such as live streaming and community activities can allow target users to interact with the business platform to better learn safety knowledge.

[0080] The following describes in detail a data processing method provided by the embodiments of this specification in conjunction with a specific application scenario. The target object is the target merchant, which can be any merchant.

[0081] This specification provides a data processing method. The execution subject of this method can be a terminal device or a server. The terminal device can be a mobile terminal device such as a mobile phone or tablet computer, a computer device such as a laptop or desktop computer, or an IoT device (specifically, a smartwatch, in-vehicle device, etc.). The server can be a single server or a server cluster composed of multiple servers. The server can be a backend server for financial or online shopping services, or a backend server for an application. This embodiment uses a server as the execution subject for detailed explanation. For the case where the execution subject is a terminal device, please refer to the following server-side processing, which will not be repeated here. The method specifically includes the following steps: In step E02, based on the merchant's attribute information, business category information, and risk level information, differentiated and tiered security education data is dynamically generated and continuously updated regularly or irregularly.

[0082] The merchant attribute information includes: For acquiring merchants, information on risk cases and preventative measures for the first pre-existing risks in business processing is obtained. The first pre-existing risks include one or more of the following: fraudulent transactions, theft, and illegal financial activities. A database corresponding to the merchant attribute information is constructed based on the obtained information on the risk cases and preventative measures for the first pre-existing risks. For content display mini-program merchants, information on second pre-existing risks in business processing is obtained. The second pre-existing risks include one or more of the following: risks in version management of content display mini-programs, product and / or service compliance risks, and risks involving specified sensitive data. A database corresponding to the merchant attribute information is constructed based on the obtained information on the second pre-existing risks. For data interaction mini-program merchants, information on third pre-existing risks in business processing is obtained. The third pre-existing risks include one or more of the following: risks in data security incident handling, employee security training, vulnerability remediation, and personal privacy authorization regulations. A database corresponding to the merchant attribute information is constructed based on the obtained information on the third pre-existing risks.

[0083] In step E04, a security education request for the target merchant is received. This security education request is received when the target merchant has not encountered any risk events in its business processing. The security education request includes the risk profile information of the target merchant, which includes one or more of the following: the target merchant's attribute information, the business category information, and the risk level information.

[0084] In step E06, in response to the aforementioned security education request, security education data for the target merchant is obtained from a database that matches the risk profile information of the target merchant, based on the risk profile information of the target merchant.

[0085] In step E08, the acquired safety education data is converted into safety education data in a preset data format, which includes one or more of the following: images, text, videos, live data, and question-and-answer data.

[0086] The safety education data includes one or more of the following: safety information, safety courses, and safety white papers. If the safety education data includes safety information, which includes one or more of regulatory policies, laws and regulations, and industry trends, the acquired safety education data will be converted into one or more data formats, such as images, text, and videos. If the safety education data includes safety courses, which includes one or more of safety case studies, case analysis, rule interpretation, and regulatory analysis, the acquired safety education data will be converted into short video data, and this short video data will be used as the safety education data converted into the preset data format. If the safety education data includes safety white papers, which include safety capability data, the acquired safety education data will be converted into graphic and text data, and this graphic and text data will be used as the safety education data converted into the preset data format.

[0087] In step E10, security education data, converted into a preset data format, is pushed to the target merchant to provide security education to the target merchant regarding risks in business processing.

[0088] In step E12, when a risk event is detected in the business process of the target merchant, the risk event encountered by the target merchant is analyzed to determine the cause information of the risk event encountered by the target merchant.

[0089] In step E14, based on the determined cause information, the handling rules for the risk events encountered by the target merchant are determined, and the risk events encountered by the target merchant are handled based on the handling rules.

[0090] In step E16, based on the determined cause information and the above-mentioned handling rules, preventive measures are constructed for the risk events encountered by the target merchant.

[0091] In step E18, based on the determined cause information, handling rules, and preventive measures, target security education data for the target merchants is generated.

[0092] In step E20, a security education upgrade notification is sent to the target merchant.

[0093] In step E22, a security education upgrade request corresponding to the security education upgrade notification is received from the target merchant.

[0094] In step E24, target security education data is pushed to target merchants to provide them with advanced security education in response to risk events encountered in their business operations.

[0095] The aforementioned process of pushing target security education data to target objects can also be as follows: converting the target security education data into target security education data in a preset data format, which includes one or more of the following: images, text, videos, live data, and Q&A data; and pushing the converted target security education data to the target merchant.

[0096] This specification provides a data processing method that receives a security education request for a target object when the target object has not encountered any risk events in its business operations. The security education request includes the target object's risk profile information, which includes one or more of the target object's attribute information, its business category information, and risk level information. Then, in response to the security education request, based on the target object's risk profile information, security education data for the target object is retrieved from a database matching the target object's risk profile information. Finally, the retrieved security education data can be pushed to the target object to provide security education on risks present in its business operations. This method combines multiple dimensions, such as the target object's business behavior, potential security risks in its operations, its business category information, and risk level information, to obtain different security education data covering potential security risks in the target object's business operations. The security education content is multifaceted and multi-dimensional. Furthermore, security education data can be provided to the target object before it encounters a risk event and is regularly uploaded to designated channels to cultivate the target object's learning habits, shifting from passive to active learning and increasing the target object's enthusiasm for security education, thereby reducing the occurrence of risk events.

[0097] Furthermore, when target users encounter risk events in their business operations, a complete educational chain can be formed, encompassing risk cause analysis, handling rules, and preventative measures. This allows for advanced safety education tailored to the specific risks encountered, helping target users deeply understand the mechanisms of risk occurrence, master practical risk mitigation solutions, and establish long-term risk prevention and control mechanisms. Through closed-loop management of event response and education reinforcement, the recurrence rate of risks can be effectively reduced. In addition, based on current reading habits, safety education can be conducted through short videos, graphic education, and safety information. Moreover, dynamic and interactive educational methods such as live streaming and community activities can allow target users to interact with the business platform to better learn safety knowledge.

[0098] The above describes the data processing method provided in the embodiments of this specification. Based on the same idea, the embodiments of this specification also provide a data processing device, such as... Figure 4 As shown.

[0099] The data processing device includes: an educational content configuration module 401, a basic education module 402, and an educational deployment module 403, wherein: The education content configuration module 401 is configured to generate corresponding safety education data based on the risk profile information of different objects. The risk profile information of different objects includes one or more of the following: attribute information of different objects, business category information, and risk level information. The basic education module 402 is configured to receive a security education request for a target object. The security education request is received when the target object has not encountered any risk events in its business processing. The security education request includes risk profile information of the target object, which includes one or more of the target object's attribute information, its business category information, and risk level information. In response to the security education request, based on the risk profile information of the target object, security education data for the target object is obtained from a database that matches the risk profile information of the target object. The education deployment module 403 is configured to push the acquired security education data to the target object in order to provide security education to the target object for risks existing in business processing.

[0100] The specific processing procedures for each of the above modules can be found in the aforementioned related content, and will not be repeated here.

[0101] In the embodiments described in this specification, such as Figure 5 As shown, the device further includes an advanced education module 404, configured to, when a target object encounters a risk event during business processing, analyze the risk event encountered by the target object to determine the cause information of the risk event encountered by the target object; based on the determined cause information, determine the handling rules for the risk event encountered by the target object, and handle the risk event encountered by the target object based on the handling rules; based on the determined cause information and the handling rules, construct preventive measures for the risk event encountered by the target object; and based on the determined cause information, the handling rules, and the preventive measures, generate target security education data for the target object. The education deployment module 403 is configured to push the target security education data to the target object in order to provide security education to the target object in response to risk events encountered by the target object in business processing.

[0102] The specific processing procedures for each of the above modules can be found in the aforementioned related content, and will not be repeated here.

[0103] In this embodiment of the specification, the education deployment module 403 is configured to send a security education upgrade notification to the target object; receive a security education upgrade request corresponding to the security education upgrade notification sent by the target object; and push the target security education data to the target object.

[0104] In this embodiment of the specification, the risk profile information of the target object includes the attribute information of the target object, which includes acquiring merchants. The educational content configuration module 401 is configured to acquire risk case information and preventive measures information of a first preset risk existing in business processing. The first preset risk includes one or more of the following: credit card fraud risk, fraud risk, and illegal financial activity risk. Based on the acquired risk case information and preventive measures information of the first preset risk, a database corresponding to the attribute information of the target object is constructed.

[0105] In this embodiment of the specification, the risk profile information of the target object includes the attribute information of the target object. The attribute information of the target object includes content display mini-program merchants. The education content configuration module 401 is configured to obtain information related to a second preset risk existing in the business process. The second preset risk includes one or more of the following: risks in the version management of content display mini-programs, product and / or service compliance risks, and risks involving specified sensitive data. A database corresponding to the attribute information of the target object is constructed based on the obtained information related to the second preset risk.

[0106] In this embodiment of the specification, the risk profile information of the target object includes the attribute information of the target object. The attribute information of the target object includes data interaction mini-program merchants. The education content configuration module 401 is configured to obtain information related to a third preset risk existing in business processing. The third preset risk includes one or more of the following: risks in data security incident handling, risks in employee security training, risks in vulnerability repair, and risks in personal privacy authorization specifications. A database corresponding to the attribute information of the target object is constructed based on the obtained information related to the third preset risk.

[0107] In this embodiment of the specification, the education deployment module 403 is configured to convert the acquired security education data into security education data in a preset data format, wherein the preset data format includes one or more of images, text, videos, live data, and question-and-answer data; and to push the security education data converted into the preset data format to the target object.

[0108] In the embodiments described in this specification, the safety education data includes one or more of the following: safety information education data, safety course education data, and safety white paper education data. The safety education data includes safety information education data, which includes one or more of the following: regulatory policy data, legal and regulatory data, and industry dynamic data. The education deployment module 403 is configured to convert the acquired safety education data into one or more data formats, such as images, text, and videos. The safety education data includes safety course-type education data, which includes one or more of the following: safety case data, case analysis data, rule interpretation data, and regulatory analysis data. The education deployment module 403 is configured to convert the acquired safety education data into short video data and use the short video data as safety education data converted into a preset data format. The safety education data includes safety white paper-type education data, which includes safety capability data. The education deployment module 403 is configured to convert the acquired safety education data into graphic data and use the graphic data as safety education data converted into a preset data format.

[0109] This specification provides a data processing device that receives a security education request for a target object. This request is received when the target object has not encountered any risk events in its business operations. The security education request includes risk profile information of the target object, which includes one or more of the following: the target object's attribute information, its business category information, and risk level information. Then, in response to the security education request, based on the target object's risk profile information, security education data for the target object is retrieved from a database matching the target object's risk profile information. Finally, the retrieved security education data can be pushed to the target object to provide security education on risks present in its business operations. This allows for the acquisition of different security education data by combining multiple dimensions such as the target object's business behavior, potential security risks in its operations, its business category information, and risk level information. This covers potential security risks in the target object's business operations, providing multi-faceted and diverse security education content. Furthermore, security education data can be provided to the target object before it encounters a risk event and is regularly uploaded to designated channels, cultivating the target object's learning habits, shifting from passive to active learning, and increasing the target object's enthusiasm for security education, thereby reducing the occurrence of risk events.

[0110] Furthermore, when target users encounter risk events in their business operations, a complete educational chain can be formed, encompassing risk cause analysis, handling rules, and preventative measures. This allows for advanced safety education tailored to the specific risks encountered, helping target users deeply understand the mechanisms of risk occurrence, master practical risk mitigation solutions, and establish long-term risk prevention and control mechanisms. Through closed-loop management of event response and education reinforcement, the recurrence rate of risks can be effectively reduced. In addition, based on current reading habits, safety education can be conducted through short videos, graphic education, and safety information. Moreover, dynamic and interactive educational methods such as live streaming and community activities can allow target users to interact with the business platform to better learn safety knowledge.

[0111] The above are the data processing apparatuses provided in the embodiments of this specification. Based on the same idea, the embodiments of this specification also provide a data processing device, such as... Figure 6 As shown.

[0112] The data processing device can provide terminal equipment or servers, etc., for the above embodiments.

[0113] Data processing devices can vary considerably depending on their configuration or performance. They may include one or more processors 601 and memory 602, with memory 602 storing one or more application programs or data. Memory 602 can be temporary or persistent storage. The application programs stored in memory 602 may include one or more modules (not shown), each module including a series of computer-executable instructions for the data processing device. Furthermore, processor 601 may be configured to communicate with memory 602 and execute the series of computer-executable instructions stored in memory 602 on the data processing device. The data processing device may also include one or more power supplies 603, one or more wired or wireless network interfaces 604, one or more input / output interfaces 605, and one or more keyboards 606.

[0114] Specifically, in this embodiment, the data processing device includes a memory and one or more programs, wherein one or more programs are stored in the memory, and one or more programs may include one or more modules, and each module may include a series of computer-executable instructions for the data processing device, and is configured to be executed by one or more processors. The one or more programs include computer-executable instructions for performing the following: Receive a security education request for a target object. The security education request is received when the target object has not encountered a risk event in its business processing. The security education request includes the risk profile information of the target object. The risk profile information includes one or more of the target object's attribute information, its business category information, and risk level information. In response to the safety education request, based on the risk profile information of the target object, safety education data for the target object is obtained from a database that matches the risk profile information of the target object; The acquired security education data is pushed to the target object to provide security education to the target object regarding the risks existing in business processes.

[0115] The various embodiments in this specification are described in a progressive manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, the data processing device embodiments are basically similar to the method embodiments, so the description is relatively simple; relevant parts can be referred to the descriptions of the method embodiments.

[0116] This specification provides a data processing device that receives a security education request for a target object. This request is received when the target object has not encountered any risk events in its business operations. The security education request includes the target object's risk profile information, which includes one or more of the target object's attribute information, its business category information, and risk level information. Then, in response to the security education request, based on the target object's risk profile information, it retrieves security education data for the target object from a database that matches the target object's risk profile information. Finally, it pushes the retrieved security education data to the target object to provide security education on risks present in its business operations. This allows for the acquisition of different security education data by combining multiple dimensions such as the target object's business behavior, potential security risks in its operations, its business category information, and risk level information. This covers potential security risks in the target object's business operations, providing multi-faceted and diverse security education content. Furthermore, security education data can be provided to the target object before it encounters a risk event and is regularly uploaded to designated channels, cultivating the target object's learning habits, shifting from passive to active learning, and increasing the target object's enthusiasm for security education, thereby reducing the occurrence of risk events.

[0117] Furthermore, based on the above Figures 2 to 3This specification also provides a storage medium for storing computer-executable instruction information in one or more embodiments. In one specific embodiment, the storage medium may be a USB flash drive, optical disc, hard disk, etc. When the computer-executable instruction information stored in the storage medium is executed by a processor, it can realize the following process: Receive a security education request for a target object. The security education request is received when the target object has not encountered a risk event in its business processing. The security education request includes the risk profile information of the target object. The risk profile information includes one or more of the target object's attribute information, its business category information, and risk level information. In response to the safety education request, based on the risk profile information of the target object, safety education data for the target object is obtained from a database that matches the risk profile information of the target object; The acquired security education data is pushed to the target object to provide security education to the target object regarding the risks existing in business processes.

[0118] The various embodiments in this specification are described in a progressive manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, the above-described storage medium embodiment is basically similar to the method embodiment, so the description is relatively simple; relevant parts can be referred to the description of the method embodiment.

[0119] This specification provides a storage medium that receives a security education request for a target object. This request is received when the target object has not encountered any risk events in its business operations. The security education request includes the target object's risk profile information, which includes one or more of the target object's attribute information, its business category information, and risk level information. Then, in response to the security education request, based on the target object's risk profile information, security education data for the target object is retrieved from a database matching the target object's risk profile information. Finally, the retrieved security education data can be pushed to the target object to provide security education on risks present in its business operations. This allows for the acquisition of different security education data by combining multiple dimensions such as the target object's business behavior, potential security risks in its operations, its business category information, and risk level information. This covers potential security risks in the target object's business operations, providing diverse and multifaceted security education content. Furthermore, security education data can be provided to the target object before it encounters a risk event and is regularly uploaded to designated channels, cultivating the target object's learning habits, shifting from passive to active learning, and increasing the target object's enthusiasm for security education, thereby reducing the occurrence of risk events.

[0120] Furthermore, based on the above Figures 2 to 3 This specification also provides one or more embodiments of a computer program product, including a computer program, which, when executed by a processor, can perform the following processes: Receive a security education request for a target object. The security education request is received when the target object has not encountered a risk event in its business processing. The security education request includes the risk profile information of the target object. The risk profile information includes one or more of the target object's attribute information, its business category information, and risk level information. In response to the safety education request, based on the risk profile information of the target object, safety education data for the target object is obtained from a database that matches the risk profile information of the target object; The acquired security education data is pushed to the target object to provide security education to the target object regarding the risks existing in business processes.

[0121] The various embodiments in this specification are described in a progressive manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on describing the differences from other embodiments. In particular, the above-described embodiment of a computer program product is relatively simple in description because it is fundamentally similar to the method embodiment; relevant parts can be referred to the description of the method embodiment.

[0122] This specification provides a computer program product that receives a security education request for a target object. This request is received when the target object has not encountered any risk events in its business operations. The security education request includes the target object's risk profile information, which includes one or more of the following: the target object's attribute information, its business category information, and risk level information. Then, in response to the security education request, based on the target object's risk profile information, it retrieves security education data for the target object from a database that matches the target object's risk profile information. Finally, it pushes the retrieved security education data to the target object to provide security education on risks present in its business operations. This allows for the acquisition of different security education data by combining multiple dimensions such as the target object's business behavior, potential security risks in its operations, its business category information, and risk level information. This covers potential security risks in the target object's business operations, providing multi-faceted and diverse security education content. Furthermore, security education data can be provided to the target object before it encounters a risk event and is regularly uploaded to designated channels, cultivating the target object's learning habits, shifting from passive to active learning, and increasing the target object's enthusiasm for security education, thereby reducing the occurrence of risk events.

[0123] The foregoing has described specific embodiments of this specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims may be performed in a different order than that shown in the embodiments and may still achieve the desired result. Furthermore, the processes depicted in the drawings do not necessarily require the specific or sequential order shown to achieve the desired result. In some embodiments, multitasking and parallel processing are possible or may be advantageous.

[0124] In the 1990s, improvements to a technology could be clearly distinguished as either hardware improvements (e.g., improvements to the circuit structure of diodes, transistors, switches, etc.) or software improvements (improvements to the methodology). However, with technological advancements, many methodological improvements today can be considered direct improvements to the hardware circuit structure. Designers almost always obtain the corresponding hardware circuit structure by programming the improved methodology into the hardware circuit. Therefore, it cannot be said that a methodological improvement cannot be implemented using hardware physical modules. For example, a Programmable Logic Device (PLD) (such as a Field Programmable Gate Array (FPGA)) is such an integrated circuit whose logic function is determined by the user programming the device. Designers can program and "integrate" a digital system onto a PLD themselves, without needing chip manufacturers to design and manufacture dedicated integrated circuit chips. Furthermore, nowadays, instead of manually manufacturing integrated circuit chips, this programming is mostly implemented using "logic compiler" software. Similar to the software compiler used in program development, the original code before compilation must also be written in a specific programming language, called a Hardware Description Language (HDL). There are many HDLs, such as ABEL (Advanced Boolean Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, and RHDL (Ruby Hardware Description Language). Currently, the most commonly used are VHDL (Very-High-Speed ​​Integrated Circuit Hardware Description Language) and Verilog. Those skilled in the art should also understand that by simply performing some logic programming on the method flow using one of these hardware description languages ​​and programming it into an integrated circuit, the hardware circuit implementing the logical method flow can be easily obtained.

[0125] The controller can be implemented in any suitable manner. For example, it can take the form of a microprocessor or processor and a computer-readable medium storing computer-readable program code (e.g., software or firmware) executable by the (micro)processor, logic gates, switches, application-specific integrated circuits (ASICs), programmable logic controllers, and embedded microcontrollers. Examples of controllers include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicon Labs C8051F320. A memory controller can also be implemented as part of the control logic of the memory. Those skilled in the art will also recognize that, in addition to implementing the controller in purely computer-readable program code form, the same functionality can be achieved by logically programming the method steps to make the controller take the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers. Therefore, such a controller can be considered a hardware component, and the means included therein for implementing various functions can also be considered as structures within the hardware component. Alternatively, the means for implementing various functions can be considered as both software modules implementing the method and structures within the hardware component.

[0126] The systems, devices, modules, or units described in the above embodiments can be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, a computer can be, for example, a personal computer, laptop computer, cellular phone, camera phone, smartphone, personal digital assistant, media player, navigation device, email device, game console, tablet computer, wearable device, or any combination of these devices.

[0127] For ease of description, the above apparatus is described by dividing it into various functional units. Of course, when implementing one or more embodiments of this specification, the functions of each unit can be implemented in one or more software and / or hardware.

[0128] Those skilled in the art will understand that the embodiments of this specification can be provided as methods, systems, or computer program products. Therefore, one or more embodiments of this specification may take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, one or more embodiments of this specification may take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0129] Embodiments in this specification are described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this specification. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable parallel device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable parallel device, generate instructions for implementing the flowchart illustrations. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0130] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable fraud device to operate in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0131] These computer program instructions can also be loaded onto a computer or other programmable device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable device for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0132] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0133] Memory may include non-persistent storage in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. Memory is an example of computer-readable media.

[0134] Computer-readable media include both permanent and non-permanent, removable and non-removable media that can store information using any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, disk storage or other magnetic storage devices, or any other non-transferable medium that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transient computer-readable media, such as modulated data signals and carrier waves.

[0135] It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0136] Those skilled in the art will understand that the embodiments of this specification can be provided as methods, systems, or computer program products. Therefore, one or more embodiments of this specification may take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, one or more embodiments of this specification may take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0137] One or more embodiments of this specification can be described in the general context of computer-executable instructions, such as program modules, that are executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc., that perform a specific task or implement a specific abstract data type. One or more embodiments of this specification can also be practiced in distributed computing environments where tasks are performed by remote processing devices connected via a communication network. In distributed computing environments, program modules can reside in local and remote computer storage media, including storage devices.

[0138] The various embodiments in this specification are described in a progressive manner. Similar or identical parts between embodiments can be referred to interchangeably. Each embodiment focuses on describing the differences from other embodiments. In particular, the system embodiments are basically similar to the method embodiments, so the description is relatively simple; relevant parts can be referred to the descriptions in the method embodiments.

[0139] The above description is merely an embodiment of this specification and is not intended to limit this document. Various modifications and variations can be made to this specification by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this specification should be included within the scope of the claims in this document.

Claims

1. A data processing method, the method comprising: Receive a security education request for a target object. The security education request is received when the target object has not encountered a risk event in its business processing. The security education request includes the risk profile information of the target object. The risk profile information includes one or more of the target object's attribute information, its business category information, and risk level information. In response to the safety education request, based on the risk profile information of the target object, safety education data for the target object is obtained from a database that matches the risk profile information of the target object; The acquired security education data is pushed to the target object to provide security education to the target object regarding the risks existing in business processes.

2. The method according to claim 1, wherein the risk profile information of the target object includes the attribute information of the target object, the attribute information of the target object includes acquiring merchants, and the method further includes: Obtain risk case information and preventive measures information for the first pre-defined risk existing in business processing. The first pre-defined risk includes one or more of the following: theft risk, fraud risk, and illegal financial activity risk. A database corresponding to the attribute information of the target object is constructed based on the risk case information and the preventive measures information of the first preset risk.

3. The method according to claim 1, wherein the risk profile information of the target object includes the attribute information of the target object, the attribute information of the target object includes content display mini-program merchants, and the method further includes: Obtain information related to a second pre-set risk existing in the business process. The second pre-set risk includes one or more of the following: risks in the version management of content display mini-programs, product and / or service compliance risks, and risks involving specified sensitive data. A database corresponding to the attribute information of the target object is constructed based on the acquired second preset risk-related information.

4. The method according to claim 1, wherein the risk profile information of the target object includes the attribute information of the target object, the attribute information of the target object includes data interaction mini-program merchants, and the method further includes: Obtain information related to a third pre-existing risk in business processes. The third pre-existing risk includes one or more of the following: risks in data security incident handling, risks in employee security training, risks in vulnerability remediation, and risks in personal privacy authorization specifications. A database corresponding to the attribute information of the target object is constructed based on the acquired third preset risk-related information.

5. The method according to any one of claims 1-4, further comprising: When a risk event is detected in the business process of a target object, the risk event encountered by the target object is analyzed to determine the cause information of the risk event encountered by the target object. Based on the determined causal information, determine the handling rules for the risk events encountered by the target object, and handle the risk events encountered by the target object based on the handling rules; Based on the determined causal information and the aforementioned handling rules, preventive measures are constructed for risk events encountered by the target object. Based on the determined causal information, the aforementioned handling rules, and the aforementioned preventive measures, target safety education data for the target object is generated. The target security education data is pushed to the target object to provide security education to the target object in response to risk events encountered in business processes.

6. The method according to claim 5, wherein pushing the target safety education data to the target object includes: Send a security education upgrade notification to the target object; Receive a security education upgrade request sent by the target object that corresponds to the security education upgrade notification; The target safety education data is pushed to the target object.

7. The method according to claim 6, wherein pushing the acquired safety education data to the target object includes: The acquired safety education data is converted into safety education data in a preset data format, which includes one or more of the following: images, text, videos, live data, and question-and-answer data. The safety education data, converted into a preset data format, will be pushed to the target object.

8. The method according to claim 7, wherein the safety education data includes one or more of the following: safety information education data, safety course education data, and safety white paper education data. The safety education data includes safety information-based education data, which includes one or more of the following: regulatory policy data, legal and regulatory data, and industry dynamic data. The process of converting the acquired safety education data into a preset data format includes: The acquired safety education data will be converted into one or more data formats, such as images, text, and videos. The safety education data includes safety course-related educational data, which includes one or more of the following: safety case data, case analysis data, rule interpretation data, and regulatory analysis data. The process of converting the acquired safety education data into a preset data format includes: The acquired safety education data is converted into short video data, and the short video data is used as safety education data converted into a preset data format. The safety education data includes safety white paper-type educational data, which includes safety capability data. The process of converting the acquired safety education data into a preset data format includes: The acquired safety education data is converted into graphic data, and the graphic data is used as safety education data converted into a preset data format.

9. A data processing apparatus, the apparatus comprising an educational content configuration module, a basic education module, and an educational deployment module, wherein: The education content configuration module is configured to generate corresponding safety education data based on the risk profile information of different objects. The risk profile information of different objects includes one or more of the following: attribute information of different objects, business category information, and risk level information. The basic education module is configured to receive a security education request for a target object. The security education request is received when the target object has not encountered a risk event in its business processing. The security education request includes the risk profile information of the target object, which includes one or more of the target object's attribute information, its business category information, and risk level information. In response to the safety education request, based on the risk profile information of the target object, safety education data for the target object is obtained from a database that matches the risk profile information of the target object; The education deployment module is configured to push the acquired security education data to the target object in order to provide security education to the target object regarding risks in business processes.

10. The apparatus according to claim 9, further comprising an advanced education module configured to, when a risk event is detected in a target object during business processing, analyze the risk event encountered by the target object and determine the cause information of the risk event encountered by the target object; Based on the determined causal information, determine the handling rules for the risk events encountered by the target object, and handle the risk events encountered by the target object based on the handling rules; Based on the determined causal information and the aforementioned handling rules, preventive measures are constructed for risk events encountered by the target object. Based on the determined causal information, the aforementioned handling rules, and the aforementioned preventive measures, target safety education data for the target object is generated. The education deployment module is configured to push the target security education data to the target object in order to provide security education to the target object in response to risk events encountered by the target object in business processing.

11. A data processing apparatus, the data processing apparatus comprising: processor; as well as A memory configured to store computer-executable instructions, which, when executed, cause the processor to: Receive a security education request for a target object. The security education request is received when the target object has not encountered a risk event in its business processing. The security education request includes the risk profile information of the target object. The risk profile information includes one or more of the target object's attribute information, its business category information, and risk level information. In response to the safety education request, based on the risk profile information of the target object, safety education data for the target object is obtained from a database that matches the risk profile information of the target object; The acquired security education data is pushed to the target object to provide security education to the target object regarding the risks existing in business processes.

Images