Method and system for risk monitoring in online business

Patent metadata

Field	Value
Publication number	US-10839328-B2
Application number	US-29490107-A
Country	US
Kind code	B2
Filing date	Mar 23, 2007
Priority date	Mar 28, 2006
Publication date	Nov 17, 2020
Grant date	Nov 17, 2020

Abstract

A method of risk monitoring in online business is disclosed. The method captures parameters of a user request and business data of processing the request by a business processing system; packs the parameters and the business data into an event object; analyzes the event object according to risk monitoring rules; and generates a risk record if a risk is determined to exist in an operation event that produces the business data. The method further determines a risk processing mode according to the risk record and a risk processing configuration, and processes the risk of the operation event in the risk processing mode. Also disclosed is a system for risk monitoring in online business.

First claim

The invention claimed is:

1. A method comprising:
Intercepting parameters of an instant user request that is provided to a processing system, wherein intercepting the parameters is performed independently to the instant user request being provided to the processing system;
Intercepting data generated by the processing system initially processing an instant transaction;
Packing the parameters of the instant user request and the data into an event object;
Analyzing the event object according to risk monitoring rules independently to the processing system processing the instant transaction, analyzing the event object comprising
Providing the event object to a rule engine which is used for analyzing risks according to the risk monitoring rules;
returning a processing result of the instant transaction responsive to the user instant request without waiting for a completion of the analyzing of the event object, wherein analyzing the event object is asynchronous with processing the instant transaction by the processing system;
generating a risk record responsive to determining that a risk exists through the analyzing the event object, the risk record comprising a user IP address and a server IP address;
Processing a risk of the risk record; and
Invalidating the instant transaction based at least in part on the processing of the risk of the risk record.

2. The method as recited in claim 1 , wherein analyzing the event object according to the risk monitoring rules further includes:
Searching a storage system for related historical events;
Creating an event context using the related historical events; and
Analyzing the event object based at least in part on the event context.

3. The method as recited in claim 1 , wherein the intercepting parameters of the instant user request, the intercepting the data, and the packing the parameters of the instant user request and the data into the event object are performed asynchronously from the analyzing the event object.

4. The method as recited in claim 1 , wherein processing the risk comprises at least one of performing automatic processing or providing warning notification.

5. The method as recited in claim 4 , further comprising, responsive to the performing automatic processing, determining an executing object for processing the risk, and sending the risk record to the executing object.

6. A method comprising:
Intercepting parameters of an instant user request and data generated by a processing system initially processing an instant transaction, wherein intercepting the parameters and the data is performed independently to the instant user request being provided to the processing system;
Packing the parameters of the instant user request and the data into an event object;
Analyzing the event object using preset risk monitoring rules and the event context;
generating a risk record responsive to a determination that a risk exists in the event object, the risk record comprising a user IP address and a server IP address;
returning a processing result of the instant transaction responsive to the user instant request without waiting for a completion of the analyzing of the event object, wherein analyzing the event object is asynchronous with processing the instant transaction by the processing system;
Processing the risk of the event object according to a risk processing mode; and
Invalidating the instant transaction based at least in part on the processing of the risk of the event object.

7. The method as recited in claim 6 , further comprising storing the preset risk monitoring rules.

8. The method as recited in claim 7 , further comprising calling the preset risk monitoring rules in analyzing the risk of the event object.

9. A method comprising:
intercepting an instant user request message entering a processing system, the intercepted instant user request message being for a requested operational event to be processed by the processing system, intercepting the instant user request message being performed independently to the instant user request message being provided to the processing system;
Intercepting, from the processing system, at least one portion of transaction data;
generating an event object based at least on the intercepted instant user request message and the at least one portion of the transaction data, the event object being packed with at least user parameters of the instant user request message and the at least one portion of the transaction data;
Analyzing the event object based at least on risk monitoring rules and determining a risk level for the requested operational event;
returning a processing result of the requested operational event responsive to the user instant request message without waiting for a completion of the analyzing of the event object, wherein analyzing the event object is asynchronous with processing the requested operational event by the processing system;
Generating a risk record that includes a user IP address and a server IP address;
Processing a risk of an instant transaction corresponding to the requested operational event according to the risk record; and
Invalidating the instant transaction based at least in part on the processing of the risk of the instant transaction.

10. The method as recited in claim 9 , further comprising: determining the risk level in accordance with risk monitoring rules.

11. The method as recited in claim 10 , further comprising: determining whether too automatically or manually process the requested operational event based at least on the risk level.

12. The method as recited in claim 9 , further comprising:
searching a historical event database, based at least on at least one user parameter, for historical events related to the requested operational event; and
Retrieving a number of related historical events from the historical event database.

13. The method as recited in claim 12 , wherein in a case where the number of related historical events retrieved from the historical event database is zero, the method further comprises: indicating in the risk record a risk monitoring rule violation indicative of zero related historical events.

Assignees

• Cheng Li
• Li Lei
• Advanced New Technologies Co Ltd

Inventors

• Cheng Li
• Li Lei

Classifications

• G06Q30/0185

  Product, service or business identity fraud · CPC title

• G06Q30/02

  Marketing; Price estimation or determination; Fundraising · CPC title

• G06Q10/0635 Primary

  Risk analysis of enterprise or organisation activities · CPC title