CN117319174A - Terminal monitoring method and system based on intelligent bank broadcasting control system - Google Patents
Terminal monitoring method and system based on intelligent bank broadcasting control system Download PDFInfo
- Publication number
- CN117319174A CN117319174A CN202311365619.8A CN202311365619A CN117319174A CN 117319174 A CN117319174 A CN 117319174A CN 202311365619 A CN202311365619 A CN 202311365619A CN 117319174 A CN117319174 A CN 117319174A
- Authority
- CN
- China
- Prior art keywords
- terminal
- abnormal
- abnormality
- real
- early warning
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000012544 monitoring process Methods 0.000 title claims abstract description 76
- 238000000034 method Methods 0.000 title claims abstract description 54
- 230000002159 abnormal effect Effects 0.000 claims abstract description 148
- 230000005856 abnormality Effects 0.000 claims abstract description 105
- 238000012545 processing Methods 0.000 claims abstract description 58
- 238000004458 analytical method Methods 0.000 claims abstract description 43
- 230000007246 mechanism Effects 0.000 claims abstract description 18
- 230000008569 process Effects 0.000 claims description 19
- 230000007613 environmental effect Effects 0.000 claims description 16
- 238000004364 calculation method Methods 0.000 claims description 14
- 238000007405 data analysis Methods 0.000 claims description 10
- 238000004422 calculation algorithm Methods 0.000 claims description 9
- 230000006399 behavior Effects 0.000 claims description 8
- 238000004590 computer program Methods 0.000 claims description 7
- 238000002955 isolation Methods 0.000 claims description 3
- 230000001960 triggered effect Effects 0.000 claims description 3
- 230000002708 enhancing effect Effects 0.000 abstract description 2
- 230000006870 function Effects 0.000 description 4
- 238000010586 diagram Methods 0.000 description 3
- 238000005516 engineering process Methods 0.000 description 3
- 230000005540 biological transmission Effects 0.000 description 2
- 230000008859 change Effects 0.000 description 2
- 238000011161 development Methods 0.000 description 2
- 241000700605 Viruses Species 0.000 description 1
- 230000006978 adaptation Effects 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000012423 maintenance Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 230000003068 static effect Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/06—Generation of reports
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
- H04L63/1425—Traffic logging, e.g. anomaly detection
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
Abstract
The invention provides a terminal monitoring method and a terminal monitoring system based on an intelligent bank broadcasting control system, and relates to the field of intelligent banks; the method comprises the following steps: acquiring real-time operation data of each terminal in a banking website and uploading the real-time operation data to an intelligent banking broadcast control system; processing and analyzing the real-time operation data to obtain a current operation analysis report of each terminal; judging whether the running state of any terminal is abnormal or not according to the current running analysis report of the terminal, triggering a monitoring and early warning mechanism when the running state of the terminal is abnormal, and pushing early warning information to an administrator so as to maintain the abnormality; wherein the anomalies include illegal operation, sensitive information leakage, equipment failure. The intelligent bank broadcasting control system is used for realizing real-time monitoring and abnormal early warning of the terminal, and effectively enhancing the safety and user experience of the bank system.
Description
Technical Field
The invention relates to the technical field of intelligent banks, in particular to a terminal monitoring method and system based on an intelligent bank broadcasting control system.
Background
With the development of intelligent banks, the safety and stability of a bank system are important to ensuring normal operation of financial business; the terminal device is used as an important component of the banking system, and the running state of the terminal device directly influences the safety of the whole banking system. Therefore, real-time monitoring and early warning of the terminal device are important demands of the banking system, however, the conventional banking system generally lacks real-time monitoring of the terminal device, which may cause problems of abnormal operation of the service, information leakage and the like, and affects the security and user experience of the banking system.
Disclosure of Invention
The invention aims to provide a terminal monitoring method and a terminal monitoring system based on an intelligent banking broadcast control system, which are used for uploading real-time operation data of a terminal to the intelligent banking broadcast control system for analysis and processing, so that the real-time monitoring and abnormal early warning of the terminal are realized, and the safety of a banking system is enhanced.
In order to achieve the above purpose, the present invention proposes the following technical scheme:
in a first aspect, a terminal monitoring method based on an intelligent banking broadcast control system is provided, including:
acquiring real-time operation data of each terminal in a banking website and uploading the real-time operation data to an intelligent banking broadcast control system; the real-time operation data comprise a real-time display picture, current hardware parameters and environment data, wherein the real-time display picture comprises characters, images and videos, and the current hardware parameters comprise CPU (central processing unit) utilization rate, memory utilization rate and network bandwidth occupancy rate;
processing and analyzing the real-time operation data to obtain a current operation analysis report of each terminal;
judging whether the running state of any terminal is abnormal or not according to the current running analysis report of the terminal; wherein the anomalies include illegal operation, sensitive information leakage, equipment failure;
when the running state of the terminal is abnormal, triggering a monitoring early warning mechanism, and pushing early warning information to an administrator so as to maintain the abnormality; and when the running state of the terminal is not abnormal, continuously acquiring and uploading real-time running data of the terminal to the intelligent banking broadcast control system for monitoring.
Further, the terminal monitoring method further includes:
for any terminal, determining the business links of each business which are possibly abnormal according to the business types of the terminal;
according to the business links, establishing a plurality of first abnormal scene templates corresponding to the terminal and early warning contents matched with the first abnormal scene templates;
and acquiring a service link and a corresponding display interface when the terminal executes any operation command in the real-time operation data, calculating the matching degree of the display interface and the first abnormal scene template established under the service link line, and pushing early warning content to an administrator when the matching degree is not lower than a first abnormal early warning threshold value.
Further, when the operation state of the terminal is abnormal, triggering a monitoring and early warning mechanism, and pushing early warning information to an administrator, the method comprises the following steps:
judging the category and the level of the current abnormality of the terminal according to the preset abnormality classification and level;
selecting corresponding abnormality management content in the monitoring and early warning mechanism according to the category and the level of the abnormality; the abnormal management content comprises immediate processing measures for the abnormality, content for pushing early warning information and an administrator for managing the abnormality;
executing the instant processing measure and pushing early warning information to the administrator according to the abnormal management content; the immediate processing measures comprise locking of abnormal terminal equipment and isolation of a network.
Further, the process of processing and analyzing the real-time operation data to obtain the current operation analysis report of each terminal includes:
processing and analyzing the real-time operation data by adopting an image processing and big data analysis algorithm to any terminal to obtain a plurality of operation characteristics of the terminal; wherein the operational characteristics include environmental characteristics, equipment characteristics, and operational characteristics;
judging the matching relation between the operation characteristics and the abnormal characteristics of the anomalies; wherein the anomaly characteristics include environmental anomaly characteristics, equipment anomaly characteristics, and operational anomaly characteristics;
according to the matching relation between the operation characteristics and the abnormal characteristics, calculating the probability of any abnormality of the terminal;
and outputting the matching relation between the operation characteristics of the terminal and the abnormal characteristics of each abnormality and the probability of any abnormality to obtain the current operation analysis report of the terminal.
Further, the process of calculating the probability of any anomaly occurring in the terminal includes:
determining the calculation weights of the environment abnormal characteristics, the equipment abnormal characteristics and the operation abnormal characteristics in the abnormal characteristics when the abnormality is judged;
acquiring matching items of the operation features and the abnormal features corresponding to the abnormality, and respectively calculating matching scores of the environment abnormal features, the equipment abnormal features and the operation abnormal features;
and calculating the probability of occurrence of the abnormality according to the product sum of the corresponding calculation weights of the matching scores of the environment abnormality feature, the equipment abnormality feature and the operation abnormality feature.
Further, the terminal monitoring method further includes:
for a banking website, establishing a second abnormal scene template corresponding to the banking website according to the business specification; the second abnormal scene template is a video template, and the video template is used for indicating any terminal for illegal operation of staff in the banking website;
acquiring a display interface containing staff in the banking website from the real-time operation data of any terminal, and identifying and intercepting videos of behavior changes of the staff;
and calculating the matching degree of the behavior data of the staff in the video segment and the second abnormal scene template, and pushing early warning information to an administrator when the matching degree is not lower than a second abnormal early warning threshold value.
In a second aspect, a terminal monitoring system based on an intelligent banking broadcast control system is provided, including:
the acquisition and uploading module is used for acquiring real-time operation data of each terminal in the banking website and uploading the real-time operation data to the intelligent banking broadcast control system; the real-time operation data comprise a real-time display picture, current hardware parameters and environment data, wherein the real-time display picture comprises characters, images and videos, and the current hardware parameters comprise CPU (central processing unit) utilization rate, memory utilization rate and network bandwidth occupancy rate;
the processing analysis module is used for processing and analyzing the real-time operation data to obtain a current operation analysis report of each terminal;
the judging module is used for judging whether the running state of any terminal is abnormal or not according to the current running analysis report of the terminal; wherein the anomalies include illegal operation, sensitive information leakage, equipment failure;
the early warning module is used for triggering a monitoring early warning mechanism when the running state of the terminal is abnormal, and pushing early warning information to an administrator so as to maintain the abnormality; and when the running state of the terminal is not abnormal, continuously acquiring and uploading real-time running data of the terminal to the intelligent banking broadcast control system for monitoring.
Further, the terminal monitoring system further includes:
the determining module is used for determining the service links of each service which are possibly abnormal for any terminal according to the service type of the terminal;
the first establishing module is used for establishing a plurality of first abnormal scene templates corresponding to the terminal and early warning contents matched with the first abnormal scene templates according to the service links;
the acquisition and calculation module is used for acquiring a business link and a corresponding display interface when the terminal executes any operation command in the real-time operation data, calculating the matching degree of the display interface and the first abnormal scene template established under the business link line, and pushing early warning content to an administrator when the matching degree is not lower than a first abnormal early warning threshold value.
Further, the processing analysis module processes and analyzes the real-time operation data to obtain an execution unit of a current operation analysis report of each terminal, and the processing analysis module includes:
the analysis acquisition unit is used for processing and analyzing the real-time operation data by adopting an image processing and big data analysis algorithm for any terminal to acquire a plurality of operation characteristics of the terminal; wherein the operational characteristics include environmental characteristics, equipment characteristics, and operational characteristics;
the judging unit is used for judging the matching relation between the operation characteristics and the abnormal characteristics of the anomalies; wherein the anomaly characteristics include environmental anomaly characteristics, equipment anomaly characteristics, and operational anomaly characteristics;
the calculating unit is used for calculating the probability of any abnormality of the terminal according to the matching relation between the operation characteristic and the abnormality characteristic;
and the output unit is used for outputting the matching relation between the operation characteristics of the terminal and the abnormal characteristics of each abnormality and the probability of any abnormality to obtain the current operation analysis report of the terminal.
In a third aspect, an electronic device is provided, including a memory, a processor, and a computer program stored in the memory and capable of running on the processor, where the processor implements the terminal monitoring method based on the intelligent banking broadcast control system when running the computer program.
According to the technical scheme, the following beneficial effects are achieved:
the invention discloses a terminal monitoring method and a terminal monitoring system based on an intelligent bank broadcasting control system, wherein the method comprises the following steps: acquiring real-time operation data of each terminal in a banking website and uploading the real-time operation data to an intelligent banking broadcast control system; processing and analyzing the real-time operation data to obtain a current operation analysis report of each terminal; judging whether the running state of any terminal is abnormal or not according to the current running analysis report of the terminal, triggering a monitoring and early warning mechanism when the running state of the terminal is abnormal, and pushing early warning information to an administrator so as to maintain the abnormality; wherein the anomalies include illegal operation, sensitive information leakage, equipment failure. The intelligent bank broadcasting control system is used for realizing real-time monitoring and abnormal early warning of the terminal.
The terminal monitoring method of the invention timely discovers and processes the abnormal condition of the terminal equipment by monitoring the real-time operation data of the terminal; specifically, on one hand, the real-time operation data are processed and analyzed through an image processing and big data analysis algorithm to obtain a plurality of operation characteristics of the terminal, the probability of abnormality of the terminal is calculated according to the matching relation between the operation characteristics and the abnormality characteristics, and the occurrence of the abnormality is judged; on the other hand, the invention judges the abnormality caused by the business handling process and the abnormal operation of the staff through the first/second abnormal scene template matching, thereby realizing the rapid recognition and the processing of the abnormality from multiple angles; the invention can ensure fluency of banking business handling through quick identification of abnormality, thereby achieving the technical effect of obviously enhancing the safety of a banking system and user experience.
It should be understood that all combinations of the foregoing concepts, as well as additional concepts described in more detail below, may be considered a part of the inventive subject matter of the present disclosure as long as such concepts are not mutually inconsistent.
The foregoing and other aspects, embodiments, and features of the present teachings will be more fully understood from the following description, taken together with the accompanying drawings. Other additional aspects of the invention, such as features and/or advantages of the exemplary embodiments, will be apparent from the description which follows, or may be learned by practice of the embodiments according to the teachings of the invention.
Drawings
The drawings are not intended to be drawn to scale with respect to true references. In the drawings, each identical or nearly identical component that is illustrated in various figures may be represented by a like numeral. For purposes of clarity, not every component may be labeled in every drawing. Embodiments of various aspects of the invention will now be described, by way of example, with reference to the accompanying drawings, in which:
fig. 1 is a flowchart of a terminal monitoring method based on an intelligent banking broadcast control system according to an embodiment of the present application;
FIG. 2 is a flowchart of determining anomalies according to a first anomaly scene template disclosed in an embodiment of the present application;
fig. 3 is a flowchart of triggering a monitoring early warning mechanism to push early warning information disclosed in an embodiment of the present application;
FIG. 4 is a flowchart for obtaining a report of analysis of the current operation of a terminal according to an embodiment of the present application;
FIG. 5 is a flowchart of calculating the probability of any anomaly occurring in a terminal according to an embodiment of the present application;
FIG. 6 is a flow chart of determining anomalies according to a second anomaly scene template disclosed in an embodiment of the present application;
FIG. 7 is a schematic diagram of an electronic device according to an embodiment of the present application;
fig. 8 is a frame diagram of a terminal monitoring system based on an intelligent banking broadcast control system according to an embodiment of the present application.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention more clear, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. It will be apparent that the described embodiments are some, but not all, embodiments of the invention. All other embodiments, which can be made by a person skilled in the art without creative efforts, based on the described embodiments of the present invention fall within the protection scope of the present invention. Unless defined otherwise, technical or scientific terms used herein should be given the ordinary meaning as understood by one of ordinary skill in the art to which this invention belongs.
The terms "first," "second," and the like in the description and in the claims, are not used for any order, quantity, or importance, but are used for distinguishing between different elements. Also, unless the context clearly indicates otherwise, singular forms "a," "an," or "the" and similar terms do not denote a limitation of quantity, but rather denote the presence of at least one. The terms "comprises," "comprising," or the like are intended to cover a feature, integer, step, operation, element, and/or component recited as being present in the element or article that "comprises" or "comprising" does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof. "up", "down", "left", "right" and the like are used only to indicate a relative positional relationship, and when the absolute position of the object to be described is changed, the relative positional relationship may be changed accordingly.
With the development of intelligent banks, real-time monitoring and early warning are required to be carried out on terminal equipment to meet the safety requirements of the intelligent banks, but the traditional bank system lacks of real-time monitoring on the terminal and cannot discover and process abnormality in time, so that abnormal operation of intelligent banking business and information leakage can be caused; therefore, the invention aims to solve the problems, and provides a terminal monitoring method and a terminal monitoring system based on an intelligent bank broadcasting control system, which are used for uploading collected operation data to the intelligent bank broadcasting control system through collecting the operation data and the operation picture of a terminal, and the broadcasting control system is used for carrying out abnormal analysis on the collected data without adding new equipment, so that the functions of the current intelligent bank are further improved, the real-time monitoring and early warning of the terminal are achieved, and the safety requirements on the intelligent bank are met.
The terminal monitoring method and system based on the intelligent banking system disclosed by the invention are further specifically introduced by combining the specific embodiments shown in the drawings.
Referring to fig. 1, the terminal monitoring method based on the intelligent banking broadcast control system disclosed in the embodiment includes the following steps:
step S102, acquiring real-time operation data of each terminal in a banking website and uploading the real-time operation data to an intelligent banking broadcast control system; the real-time operation data comprise a real-time display picture, current hardware parameters and environment data, wherein the real-time display picture comprises characters, images and videos, the current hardware parameters comprise CPU (central processing unit) utilization rate, memory utilization rate and network bandwidth occupancy rate, and the environment data mainly comprise personnel conditions in a set range of each terminal identified by cameras arranged in a banking network;
step S104, processing and analyzing the real-time operation data to obtain a current operation analysis report of each terminal; the purpose of obtaining the current operation analysis report of the terminal is to analyze the operation state of the current terminal from the environment, equipment and operation angles respectively so as to assist in judging whether the operation of the terminal is abnormal;
step S106, judging whether the running state of any terminal is abnormal or not according to the current running analysis report of the terminal; wherein the anomalies include illegal operation, sensitive information leakage, equipment failure;
step S108, when the running state of the terminal is abnormal, triggering a monitoring and early warning mechanism, and pushing early warning information to an administrator so as to maintain the abnormality; and when the running state of the terminal is not abnormal, continuously acquiring and uploading real-time running data of the terminal to the intelligent banking broadcast control system for monitoring. The content of maintenance by the administrator comprises repairing system loopholes, removing viruses, optimizing configuration and the like, and normal running of the terminal equipment and normal running of business operation are ensured.
Step S104 processes and analyzes the real-time operation data to obtain a current operation analysis report of each terminal, as shown in fig. 4, including: step S402, processing and analyzing the real-time operation data by adopting an image processing and big data analysis algorithm for any terminal to obtain a plurality of operation characteristics of the terminal; wherein the operational characteristics include environmental characteristics, equipment characteristics, and operational characteristics; the operation characteristic selection basis is to extract typical data in real-time operation data of the terminal under the corresponding analysis angle, for example, the environment characteristic is the number of people who observe a terminal display interface in the environment data by adopting an image processing mode, and the equipment characteristic is the core hardware parameter data which affects the operation of the terminal at present; the operation characteristic is the operation purpose of the terminal by the user identified by the big data analysis algorithm. Step S404, judging the matching relation between the operation characteristic and the abnormal characteristic of each abnormality; wherein the anomaly characteristics include environmental anomaly characteristics, equipment anomaly characteristics, and operational anomaly characteristics; optionally, an abnormal characteristic database corresponding to each abnormality is established in advance from the angles of environment, equipment and operation, and the abnormal characteristic databases are stored according to classes; when matching is carried out, matching is carried out on the obtained operation features with the abnormal features in the abnormal feature database one by one according to the classification of the operation features, and the number of the operation features is 1; namely, for the operation characteristics of any angle, the number of items successfully matched with the characteristics is the score; step S406, calculating the probability of any abnormality of the terminal according to the matching relation between the operation characteristic and the abnormality characteristic; step S408, outputting a matching relationship between the operation feature of the terminal and the abnormal feature of each abnormality, and a probability of any abnormality, to obtain a current operation analysis report of the terminal.
Optionally, as shown in fig. 5, the process of calculating the probability of occurrence of any anomaly by the terminal in step S406 includes the following steps: step S4061, determining the calculation weights of the environmental abnormality feature, the equipment abnormality feature, and the operation abnormality feature among the abnormality features thereof when the abnormality is determined; step S4062, obtaining matching items of the operation features and the abnormal features corresponding to the abnormality, and respectively calculating matching scores of the environment abnormal features, the equipment abnormal features and the operation abnormal features; step S4063, calculating the probability of occurrence of the abnormality according to the product sum of the calculation weights corresponding to the matching scores of the environmental abnormality feature, the equipment abnormality feature and the operation abnormality feature.
For example, for an anomaly, the total scores of the environmental anomaly characteristic, the equipment anomaly characteristic and the operation anomaly characteristic are 5, 3 and 6 in sequence, the calculation weights of the environmental anomaly characteristic, the equipment anomaly characteristic and the operation anomaly characteristic are 0.3, 0.1 and 0.6 respectively, and the calculated matching scores are 3, 1 and 4 in sequence, so that the probability of occurrence of the anomaly of the terminal is p= (3×0.3+1×0.1+4×0.6)/(5×0.3+3×0.1+6×0.6) ×100% = 62.96%. For example, in step S106, it is determined whether or not there is an abnormality in the operation state of the terminal, that is, it is determined according to the calculated probability; such as when a probability P calculated by a terminal is 100% indicates that the current terminal is experiencing the anomaly. Optionally, when the probability P calculated by a certain terminal exceeds a preset probability threshold, for example, 85%, but does not reach 100%, which indicates that the terminal is about to generate a corresponding abnormality, an early warning program of the intelligent banking system may be preset, and in this case, an early warning prompt is sent to an administrator, so that the administrator performs advanced management, and avoids the abnormality.
In the foregoing step S108, when the operation state of the terminal is abnormal, a monitoring and early warning mechanism is triggered, and the specific process of pushing early warning information to the administrator includes the steps as shown in fig. 3: step S1081, judging the category and the level of the current abnormality of the terminal according to the preset abnormality classification and level; step S1082, selecting corresponding abnormality management content in the monitoring and early warning mechanism according to the category and level to which the abnormality belongs; the abnormal management content comprises immediate processing measures for the abnormality, content for pushing early warning information and an administrator for managing the abnormality; namely, the monitoring and early warning mechanism also sets hierarchical management contents according to preset abnormal categories and levels; step S1083, executing the instant processing measure and pushing early warning information to the administrator according to the abnormal management content; the instant processing measures comprise locking of abnormal terminal equipment and an isolated network, and are used for preventing further safety risks; and the manager managing the abnormality is respectively determined by classification and grade of the abnormality, if the abnormality is sensitive information leakage, the manager can be directly set as a hall manager, and the hall manager can quickly manage and control the terminal where the abnormality occurs, and the leaked sensitive information is recovered or deleted so as to avoid further leakage of the sensitive information.
As an optional implementation manner, the terminal monitoring method based on the intelligent bank broadcasting control system further comprises performing anomaly matching judgment on anomalies according to the known anomaly scene template, namely performing anomaly judgment according to anomalies possibly occurring in the business of each terminal; as shown in fig. 2, the method specifically comprises the following steps: step S202, for any terminal, determining the service links of each service which are possibly abnormal according to the service type; step S204, according to the business links, establishing a plurality of first abnormal scene templates corresponding to the terminal and early warning contents matched with the first abnormal scene templates; step S206, a business link and a corresponding display interface when the terminal executes any operation command in the real-time operation data are obtained, the matching degree of the display interface and the first abnormal scene template established under the business link line is calculated, and when the matching degree is not lower than a first abnormal early warning threshold value, early warning content is pushed to an administrator. Wherein the content of the template matching comprises words and images.
The process is a process of establishing an abnormal scene template according to the service type of the terminal to perform abnormal matching judgment, and optionally, the process of performing abnormal matching judgment according to a known abnormal scene template can also include a process of performing matching judgment on the abnormality generated based on illegal operation of staff in a banking website; as shown in fig. 6, the method comprises: step S602, establishing a second abnormal scene template corresponding to a banking website according to the business specification of the banking website; the second abnormal scene template is a video template, and the video template is used for indicating any terminal for illegal operation of staff in the banking website; step S604, a display interface containing staff in the banking website is obtained from the real-time operation data of any terminal, and videos of the staff with behavior change are identified and intercepted; step S606, calculating the matching degree of the behavior data of the staff in the video segment and the second abnormal scene template, and pushing early warning information to an administrator when the matching degree is not lower than a second abnormal early warning threshold value.
According to the terminal monitoring method based on the intelligent bank broadcasting control system, on one hand, real-time operation data of the terminal are processed and analyzed through image processing and big data analysis algorithm to obtain operation characteristics of the terminal, probability of occurrence of each abnormality of the terminal is calculated according to matching relation between the operation characteristics and the abnormality characteristics of the terminal, and occurrence of the abnormality is judged; on the other hand, judging the abnormality of the business handling process and the abnormal operation of the staff by establishing a first/second abnormal scene template matching; the terminal monitoring method provided by the invention can be used for rapidly identifying and processing the abnormality in various modes, so that safe and efficient operation of banking outlets is ensured.
In an embodiment of the present application, there is further provided an electronic device, where the electronic device includes a memory, a processor, and a computer program stored in the memory and capable of running on the processor, and when the processor runs the computer program, the terminal monitoring method based on the intelligent banking broadcast control system disclosed in the foregoing embodiment is implemented. Taking an electronic device running on a computer as illustrated in fig. 7, the electronic device may include one or more (only one is illustrated in the figure) processors (the processors may include, but are not limited to, a microprocessor MCU or a processing device such as a programmable logic device FPGA), a memory for storing data, and a transmission device for communication functions. It will be appreciated by those of ordinary skill in the art that the configuration shown in fig. 7 is merely illustrative and is not intended to limit the configuration of the electronic device described above.
The above-described programs may be run on a processor or may be stored in a memory, i.e., a computer readable medium, including both permanent and non-permanent, removable and non-removable media, which may be implemented by any method or technology for information storage. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of storage media for a computer include, but are not limited to, phase change memory (PRAM), static Random Access Memory (SRAM), dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), read Only Memory (ROM), electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium, which can be used to store information that can be accessed by a computing device. Computer-readable media, as defined herein, does not include transitory computer-readable media, such as modulated data signals and carrier waves. These computer programs may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart block or blocks and/or block diagram block or blocks, and corresponding method steps may be implemented in different modules.
In this embodiment, there is provided a device or system, which may be referred to as a terminal monitoring system based on an intelligent banking control system, as shown in fig. 8, including: the acquisition and uploading module is used for acquiring real-time operation data of each terminal in the banking website and uploading the real-time operation data to the intelligent banking broadcast control system; the real-time operation data comprise a real-time display picture, current hardware parameters and environment data, wherein the real-time display picture comprises characters, images and videos, and the current hardware parameters comprise CPU (central processing unit) utilization rate, memory utilization rate and network bandwidth occupancy rate; the processing analysis module is used for processing and analyzing the real-time operation data to obtain a current operation analysis report of each terminal; the judging module is used for judging whether the running state of any terminal is abnormal or not according to the current running analysis report of the terminal; wherein the anomalies include illegal operation, sensitive information leakage, equipment failure; the early warning module is used for triggering a monitoring early warning mechanism when the running state of the terminal is abnormal, and pushing early warning information to an administrator so as to maintain the abnormality; and when the running state of the terminal is not abnormal, continuously acquiring and uploading real-time running data of the terminal to the intelligent banking broadcast control system for monitoring.
The steps of the system for implementing the terminal monitoring method based on the intelligent banking broadcast control system disclosed in the above embodiment have already been described and will not be described herein.
For example, the terminal monitoring system further includes: the determining module is used for determining the service links of each service which are possibly abnormal for any terminal according to the service type of the terminal; the first establishing module is used for establishing a plurality of first abnormal scene templates corresponding to the terminal and early warning contents matched with the first abnormal scene templates according to the service links; the acquisition and calculation module is used for acquiring a business link and a corresponding display interface when the terminal executes any operation command in the real-time operation data, calculating the matching degree of the display interface and the first abnormal scene template established under the business link line, and pushing early warning content to an administrator when the matching degree is not lower than a first abnormal early warning threshold value.
For another example, in the early warning module, when the operation state of the terminal is abnormal, a monitoring early warning mechanism is triggered, and early warning information is pushed to an execution unit of an administrator, including: the judging unit is used for judging the category and the level of the current abnormality of the terminal according to the preset abnormality classification and level; the selection unit is used for selecting corresponding abnormality management content in the monitoring and early warning mechanism according to the category and the level to which the abnormality belongs; the abnormal management content comprises immediate processing measures for the abnormality, content for pushing early warning information and an administrator for managing the abnormality; the execution pushing unit is used for executing the instant processing measure and pushing the early warning information to the administrator according to the abnormal management content; the immediate processing measures comprise locking of abnormal terminal equipment and isolation of a network.
For another example, the processing analysis module processes and analyzes the real-time operation data to obtain an execution unit of a current operation analysis report of each terminal, and the execution unit includes: the analysis acquisition unit is used for processing and analyzing the real-time operation data by adopting an image processing and big data analysis algorithm for any terminal to acquire a plurality of operation characteristics of the terminal; wherein the operational characteristics include environmental characteristics, equipment characteristics, and operational characteristics; the judging unit is used for judging the matching relation between the operation characteristics and the abnormal characteristics of the anomalies; wherein the anomaly characteristics include environmental anomaly characteristics, equipment anomaly characteristics, and operational anomaly characteristics; the calculating unit is used for calculating the probability of any abnormality of the terminal according to the matching relation between the operation characteristic and the abnormality characteristic; and the output unit is used for outputting the matching relation between the operation characteristics of the terminal and the abnormal characteristics of each abnormality and the probability of any abnormality to obtain the current operation analysis report of the terminal.
For another example, the calculation unit calculates a probability of occurrence of any one of the abnormalities of the terminal, including: determining the calculation weights of the environment abnormal characteristics, the equipment abnormal characteristics and the operation abnormal characteristics in the abnormal characteristics when the abnormality is judged; acquiring matching items of the operation features and the abnormal features corresponding to the abnormality, and respectively calculating matching scores of the environment abnormal features, the equipment abnormal features and the operation abnormal features; and calculating the probability of occurrence of the abnormality according to the product sum of the corresponding calculation weights of the matching scores of the environment abnormality feature, the equipment abnormality feature and the operation abnormality feature.
For another example, the terminal monitoring system further includes: the second building module is used for building a second abnormal scene template corresponding to the banking website according to the business specification of the banking website; the second abnormal scene template is a video template, and the video template is used for indicating any terminal for illegal operation of staff in the banking website; the identification module is used for acquiring a display interface containing a worker in the banking website from the real-time operation data of any terminal, and identifying and intercepting videos of behavior changes of the worker; and the calculation pushing module is used for calculating the matching degree of the behavior data of the staff in the video segment and the second abnormal scene template, and pushing the early warning information to an administrator when the matching degree is not lower than a second abnormal early warning threshold value.
The invention discloses a terminal monitoring method and a terminal monitoring system based on an intelligent bank broadcasting control system, wherein the scheme core concept is as follows: the intelligent banking system is used for analyzing and processing the uploaded data based on image processing and big data analysis technology, real-time monitoring and early warning are carried out on the network points through the intelligent banking system, on one hand, real-time monitoring and early warning are carried out on sudden anomalies, on the other hand, rapid early warning is carried out on the anomalies which possibly occur, timely discovery and processing of the terminal display picture and abnormal conditions of equipment operation are achieved, safety and user experience of intelligent banking operation are remarkably enhanced, and stability of intelligent banking functions is guaranteed.
While the invention has been described with reference to preferred embodiments, it is not intended to be limiting. Those skilled in the art will appreciate that various modifications and adaptations can be made without departing from the spirit and scope of the present invention. Accordingly, the scope of the invention is defined by the appended claims.
Claims (10)
1. A terminal monitoring method based on an intelligent bank broadcasting control system is characterized by comprising the following steps:
acquiring real-time operation data of each terminal in a banking website and uploading the real-time operation data to an intelligent banking broadcast control system; the real-time operation data comprise a real-time display picture, current hardware parameters and environment data, wherein the real-time display picture comprises characters, images and videos, and the current hardware parameters comprise CPU (central processing unit) utilization rate, memory utilization rate and network bandwidth occupancy rate;
processing and analyzing the real-time operation data to obtain a current operation analysis report of each terminal;
judging whether the running state of any terminal is abnormal or not according to the current running analysis report of the terminal; wherein the anomalies include illegal operation, sensitive information leakage, equipment failure;
when the running state of the terminal is abnormal, triggering a monitoring early warning mechanism, and pushing early warning information to an administrator so as to maintain the abnormality; and when the running state of the terminal is not abnormal, continuously acquiring and uploading real-time running data of the terminal to the intelligent banking broadcast control system for monitoring.
2. The terminal monitoring method based on the intelligent banking system as claimed in claim 1, further comprising:
for any terminal, determining the business links of each business which are possibly abnormal according to the business types of the terminal;
according to the business links, establishing a plurality of first abnormal scene templates corresponding to the terminal and early warning contents matched with the first abnormal scene templates;
and acquiring a service link and a corresponding display interface when the terminal executes any operation command in the real-time operation data, calculating the matching degree of the display interface and the first abnormal scene template established under the service link line, and pushing early warning content to an administrator when the matching degree is not lower than a first abnormal early warning threshold value.
3. The terminal monitoring method based on the intelligent banking broadcast control system according to claim 1, wherein when the operation state of the terminal is abnormal, a monitoring and early warning mechanism is triggered, and early warning information is pushed to an administrator, comprising:
judging the category and the level of the current abnormality of the terminal according to the preset abnormality classification and level;
selecting corresponding abnormality management content in the monitoring and early warning mechanism according to the category and the level of the abnormality; the abnormal management content comprises immediate processing measures for the abnormality, content for pushing early warning information and an administrator for managing the abnormality;
executing the instant processing measure and pushing early warning information to the administrator according to the abnormal management content; the immediate processing measures comprise locking of abnormal terminal equipment and isolation of a network.
4. The terminal monitoring method based on the intelligent banking system according to claim 1, wherein the process of processing and analyzing the real-time operation data to obtain the current operation analysis report of each terminal comprises the following steps:
processing and analyzing the real-time operation data by adopting an image processing and big data analysis algorithm to any terminal to obtain a plurality of operation characteristics of the terminal; wherein the operational characteristics include environmental characteristics, equipment characteristics, and operational characteristics;
judging the matching relation between the operation characteristics and the abnormal characteristics of the anomalies; wherein the anomaly characteristics include environmental anomaly characteristics, equipment anomaly characteristics, and operational anomaly characteristics;
according to the matching relation between the operation characteristics and the abnormal characteristics, calculating the probability of any abnormality of the terminal;
and outputting the matching relation between the operation characteristics of the terminal and the abnormal characteristics of each abnormality and the probability of any abnormality to obtain the current operation analysis report of the terminal.
5. The terminal monitoring method based on the intelligent banking system as claimed in claim 4, wherein the process of calculating the probability of any one of the anomalies occurring in the terminal includes:
determining the calculation weights of the environment abnormal characteristics, the equipment abnormal characteristics and the operation abnormal characteristics in the abnormal characteristics when the abnormality is judged;
acquiring matching items of the operation features and the abnormal features corresponding to the abnormality, and respectively calculating matching scores of the environment abnormal features, the equipment abnormal features and the operation abnormal features;
and calculating the probability of occurrence of the abnormality according to the product sum of the corresponding calculation weights of the matching scores of the environment abnormality feature, the equipment abnormality feature and the operation abnormality feature.
6. The terminal monitoring method based on the intelligent banking system as claimed in claim 2, further comprising:
for a banking website, establishing a second abnormal scene template corresponding to the banking website according to the business specification; the second abnormal scene template is a video template, and the video template is used for indicating any terminal for illegal operation of staff in the banking website;
acquiring a display interface containing staff in the banking website from the real-time operation data of any terminal, and identifying and intercepting videos of behavior changes of the staff;
and calculating the matching degree of the behavior data of the staff in the video segment and the second abnormal scene template, and pushing early warning information to an administrator when the matching degree is not lower than a second abnormal early warning threshold value.
7. Terminal monitored control system based on wisdom bank broadcast control system, characterized by comprising:
the acquisition and uploading module is used for acquiring real-time operation data of each terminal in the banking website and uploading the real-time operation data to the intelligent banking broadcast control system; the real-time operation data comprise a real-time display picture, current hardware parameters and environment data, wherein the real-time display picture comprises characters, images and videos, and the current hardware parameters comprise CPU (central processing unit) utilization rate, memory utilization rate and network bandwidth occupancy rate;
the processing analysis module is used for processing and analyzing the real-time operation data to obtain a current operation analysis report of each terminal;
the judging module is used for judging whether the running state of any terminal is abnormal or not according to the current running analysis report of the terminal; wherein the anomalies include illegal operation, sensitive information leakage, equipment failure;
the early warning module is used for triggering a monitoring early warning mechanism when the running state of the terminal is abnormal, and pushing early warning information to an administrator so as to maintain the abnormality; and when the running state of the terminal is not abnormal, continuously acquiring and uploading real-time running data of the terminal to the intelligent banking broadcast control system for monitoring.
8. The intelligent banking system-based terminal monitoring system of claim 7, further comprising:
the determining module is used for determining the service links of each service which are possibly abnormal for any terminal according to the service type of the terminal;
the first establishing module is used for establishing a plurality of first abnormal scene templates corresponding to the terminal and early warning contents matched with the first abnormal scene templates according to the service links;
the acquisition and calculation module is used for acquiring a business link and a corresponding display interface when the terminal executes any operation command in the real-time operation data, calculating the matching degree of the display interface and the first abnormal scene template established under the business link line, and pushing early warning content to an administrator when the matching degree is not lower than a first abnormal early warning threshold value.
9. The terminal monitoring system based on the intelligent banking system according to claim 7, wherein the processing analysis module processes and analyzes the real-time operation data to obtain an execution unit of a current operation analysis report of each terminal, and the execution unit comprises:
the analysis acquisition unit is used for processing and analyzing the real-time operation data by adopting an image processing and big data analysis algorithm for any terminal to acquire a plurality of operation characteristics of the terminal; wherein the operational characteristics include environmental characteristics, equipment characteristics, and operational characteristics;
the judging unit is used for judging the matching relation between the operation characteristics and the abnormal characteristics of the anomalies; wherein the anomaly characteristics include environmental anomaly characteristics, equipment anomaly characteristics, and operational anomaly characteristics;
the calculating unit is used for calculating the probability of any abnormality of the terminal according to the matching relation between the operation characteristic and the abnormality characteristic;
and the output unit is used for outputting the matching relation between the operation characteristics of the terminal and the abnormal characteristics of each abnormality and the probability of any abnormality to obtain the current operation analysis report of the terminal.
10. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, the processor implementing the terminal monitoring method based on an intelligent banking control system as claimed in any one of claims 1-6 when the computer program is executed by the processor.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311365619.8A CN117319174A (en) | 2023-10-20 | 2023-10-20 | Terminal monitoring method and system based on intelligent bank broadcasting control system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311365619.8A CN117319174A (en) | 2023-10-20 | 2023-10-20 | Terminal monitoring method and system based on intelligent bank broadcasting control system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN117319174A true CN117319174A (en) | 2023-12-29 |
Family
ID=89297101
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202311365619.8A Pending CN117319174A (en) | 2023-10-20 | 2023-10-20 | Terminal monitoring method and system based on intelligent bank broadcasting control system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN117319174A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN119323063A (en) * | 2024-12-18 | 2025-01-17 | 广州卓腾科技有限公司 | Self-service police terminal method, system and medium based on intelligent peeping-preventing algorithm |
-
2023
- 2023-10-20 CN CN202311365619.8A patent/CN117319174A/en active Pending
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN119323063A (en) * | 2024-12-18 | 2025-01-17 | 广州卓腾科技有限公司 | Self-service police terminal method, system and medium based on intelligent peeping-preventing algorithm |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US20230418943A1 (en) | Method and device for image-based malware detection, and artificial intelligence-based endpoint detection and response system using same | |
| EP2747365A1 (en) | Network security management | |
| CN110895811B (en) | Image tampering detection method and device | |
| EP4254241A1 (en) | Method and device for image-based malware detection, and artificial intelligence-based endpoint detection and response system using same | |
| CN118487872B (en) | Nuclear power industry-oriented network abnormal behavior detection and analysis method | |
| CN108390793A (en) | A kind of method and device of analysis system stability | |
| CN115767550B (en) | A device for network risk assessment of 5G private network | |
| CN116246416A (en) | Intelligent analysis early warning platform and method for security protection | |
| CN118135480A (en) | Visual image processing method and system for electromechanical construction of tunnel | |
| CN117319174A (en) | Terminal monitoring method and system based on intelligent bank broadcasting control system | |
| CN115001934A (en) | Industrial control safety risk analysis system and method | |
| CN110636077A (en) | Network security protection system and method based on unified platform | |
| CN113099242B (en) | Power transmission line video monitoring data processing method and system | |
| CN116015922A (en) | A network security situation analysis method, device and equipment of the electric power Internet of things | |
| CN115861929A (en) | Monitoring system, method, equipment and storage medium for service specification of electric power business hall | |
| CN113691390B (en) | A cloud-coordinated edge node alarm system and method | |
| CN113723268B (en) | Method, device, computer storage medium and processor for identifying power grid faults | |
| CN119759656A (en) | A communication data backup method and system based on Internet of Things security service | |
| CN113869116A (en) | Construction machinery early warning method, device and medium for overhead transmission line | |
| CN115659351B (en) | Information security analysis method, system and equipment based on big data office | |
| CN118153091A (en) | Privacy data protection method, system and medium based on remote control | |
| CN115017014B (en) | Highway electromechanical monitoring system and method | |
| CN115982428A (en) | Alarm aggregation method and device, electronic equipment and storage medium | |
| CN114880392A (en) | Mass data normalization processing method for multi-source heterogeneous safety equipment | |
| CN114386797A (en) | Internet of things card management and control method, system and device and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |