CN-121981811-A - Method and device for monitoring customer information, electronic equipment and storage medium

CN121981811ACN 121981811 ACN121981811 ACN 121981811ACN-121981811-A

Abstract

The application discloses a monitoring method and a device for customer information, electronic equipment and a storage medium, wherein the monitoring method and the device can collect and correlate and analyze employee inquiry operation and corresponding business scene data in real time, accurately judge the correlation between inquiry intention and business, dynamically fuse history and newly added violation samples to update an identification model by means of an incremental learning mechanism, adapt to the dynamic and concealed characteristics of the violation, and rapidly output the violation result by grading early warning information without relying on manual intervention in large quantity.

Inventors

QIAO GUANFENG
WU JING
ZHAO BOCHAO
LIU XIAOLI
Sun Meihan

Assignees

中国建设银行股份有限公司河北省分行

Dates

Publication Date: 20260505
Application Date: 20251211

Claims (10)

1. A method for monitoring customer information, comprising: Collecting and preprocessing inquiry operation data of staff and corresponding service scene data in real time to obtain data to be analyzed; performing association analysis on the query operation data and the service scene data to identify whether the query intention is related to the current service; based on an incremental learning mechanism, dynamically updating a violation identification model by utilizing a history violation pattern sample and a newly added sample to identify the violation query behavior in the data to be analyzed; and generating and outputting grading early warning information according to the identified illegal query behaviors and the related information thereof.
2. The method according to claim 1, wherein the collecting and preprocessing the query operation data of the staff and the corresponding business scenario data in real time to obtain the data to be analyzed includes: from the collected data, query operation data with legal authorization is filtered.
3. The method of claim 2, wherein the correlating the query operation data with the business context data comprises: and fusing the characteristics of the query operation data with the characteristics of the service scene data to generate fusion characteristics containing service context information.
4. The method of claim 1, wherein dynamically updating the violation identification model with the history violation pattern sample and the new sample based on the incremental learning mechanism comprises: dynamically distributing storage quota for storing historical violation pattern samples for each business scene according to the violation historical data of different business scenes; When the newly added sample meets the preset condition, triggering a model updating process, and reserving the recognition capability of the historical violation pattern in the updating process.
5. The method of claim 1, wherein generating and outputting hierarchical early warning information based on the identified offending query behavior and its associated information comprises: Calculating a comprehensive risk score according to the violation probability output by the violation identification model and the sensitivity of the queried information; and triggering the early warning processing flow of the corresponding level according to the level interval of the comprehensive risk score.
6. The method according to claim 1, wherein the method further comprises: and taking the processing result of the early warning information as feedback data, and inputting the feedback data into the incremental learning mechanism for optimizing subsequent violation identification.
7. A device for monitoring customer information, comprising: the acquisition unit is also used for acquiring and preprocessing inquiry operation data of staff and corresponding service scene data in real time to obtain data to be analyzed; the analysis unit is also used for carrying out association analysis on the query operation data and the service scene data so as to identify whether the query intention is related to the current service; The updating unit is also used for dynamically updating the violation identification model by utilizing the historical violation pattern sample and the newly added sample based on an incremental learning mechanism so as to identify the violation inquiry behaviors in the data to be analyzed; The generation unit is also used for generating and outputting grading early warning information according to the identified illegal query behaviors and the related information thereof.
8. An electronic device, comprising: at least one processor, and A memory communicatively coupled to the at least one processor, wherein, The memory stores instructions executable by the at least one processor to enable the at least one processor to perform the method of any one of claims 1-6.
9. A non-transitory computer readable storage medium storing computer instructions for causing the computer to perform the method of any one of claims 1-6.
10. A computer program product comprising a computer program which, when executed by a processor, implements the method according to any of claims 1-6.

Description

Method and device for monitoring customer information, electronic equipment and storage medium Technical Field The disclosure relates to the technical field of data processing, and in particular relates to a method and a device for monitoring customer information, electronic equipment and a storage medium. Background In the digital financial era, the security protection of customer information has become a core requirement of banking compliance. The bank staff needs to inquire the sensitive information of the clients through a business system in daily life, but the illegal inquiry behavior becomes a key source of data security threat due to the dynamic and concealed characteristics of the illegal inquiry behavior. In the existing violation monitoring method, a post audit mode is directly adopted, so that the violation can only be traced afterwards, real-time blocking is impossible, manual intervention is needed, and the limitations of low response efficiency, management closed loop deletion and the like exist. Disclosure of Invention The disclosure provides a method, a device, electronic equipment and a storage medium for monitoring customer information. According to a first aspect of the present disclosure, there is provided a method for monitoring customer information, including: Collecting and preprocessing inquiry operation data of staff and corresponding service scene data in real time to obtain data to be analyzed; performing association analysis on the query operation data and the service scene data to identify whether the query intention is related to the current service; based on an incremental learning mechanism, dynamically updating a violation identification model by utilizing a history violation pattern sample and a newly added sample to identify the violation query behavior in the data to be analyzed; and generating and outputting grading early warning information according to the identified illegal query behaviors and the related information thereof. Optionally, the collecting and preprocessing the query operation data of the staff and the corresponding service scene data in real time to obtain the data to be analyzed includes: from the collected data, query operation data with legal authorization is filtered. Optionally, the performing association analysis on the query operation data and the service scene data includes: and fusing the characteristics of the query operation data with the characteristics of the service scene data to generate fusion characteristics containing service context information. Optionally, the dynamically updating the violation identification model based on the incremental learning mechanism by using the history violation pattern sample and the newly added sample includes: dynamically distributing storage quota for storing historical violation pattern samples for each business scene according to the violation historical data of different business scenes; When the newly added sample meets the preset condition, triggering a model updating process, and reserving the recognition capability of the historical violation pattern in the updating process. Optionally, generating and outputting the hierarchical early warning information according to the identified illegal query behavior and the related information thereof includes: Calculating a comprehensive risk score according to the violation probability output by the violation identification model and the sensitivity of the queried information; and triggering the early warning processing flow of the corresponding level according to the level interval of the comprehensive risk score. Optionally, the method further comprises: and taking the processing result of the early warning information as feedback data, and inputting the feedback data into the incremental learning mechanism for optimizing subsequent violation identification. According to a second aspect of the present disclosure, there is provided a monitoring apparatus for customer information, comprising: the acquisition unit is also used for acquiring and preprocessing inquiry operation data of staff and corresponding service scene data in real time to obtain data to be analyzed; the analysis unit is also used for carrying out association analysis on the query operation data and the service scene data so as to identify whether the query intention is related to the current service; The updating unit is also used for dynamically updating the violation identification model by utilizing the historical violation pattern sample and the newly added sample based on an incremental learning mechanism so as to identify the violation inquiry behaviors in the data to be analyzed; The generation unit is also used for generating and outputting grading early warning information according to the identified illegal query behaviors and the related information thereof. Optionally, the acquisition unit is further configured to: from the collected data, query operation data with legal autho