METHOD AND DEVICE FOR CONTROLLING SERVICE OPERATION RISK

• US 20200134630A1
• Filed: 12/23/2019
• Published: 04/30/2020
• Est. Priority Date: 07/22/2016
• Status: Abandoned Application

• Current Assignee: Alibaba Group Holding Ltd.
• Original Assignee: Alibaba Group Holding Ltd.
• Inventors: Xia, Jupeng, Li, Caiwei, Gu, Xi, Jiang, Bao
• Application Number:
  US16/725,780
• Publication Number:
  US 20200134630A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

The present application discloses example methods, computer-readable mediums, and systems for controlling service operation risks. In one example, method, an application program on an end-user device monitors a service operation initiated by a user for invoking offline service information. After the service operation is monitored, it is determined whether the service operation is a risky operation based on recorded historical operation data and at least one of a predetermined risk evaluation rule or a risk evaluation model. In response to determining that the service operation is a risky operation, a refusal to invoke the offline service information is performed. In response to determining that the service operation is not a risky operation, the offline service information is invoked.

Claims

1. A computer-implemented method, comprising:

monitoring, by an application program on an end-user device, a service operation initiated by a user for invoking offline service information;

determining, after the service operation is monitored, whether the service operation is a risky operation based on recorded historical operation data and at least one of a predetermined risk evaluation rule or a risk evaluation model;

in response to determining that the service operation is a risky operation, refusing to invoke the offline service information; and

in response to determining that the service operation is not a risky operation, invoking the offline service information.

2. The computer-implemented method of claim 1, wherein determining whether the service operation is a risky operation comprises:

determining a first identity verification operation related to the service operation;

determining a risk characterization value of the first identity verification operation based on a first verification method corresponding to the first identity verification operation, the historical operation data, and at least one of the predetermined risk evaluation rule and risk evaluation model;

determining, based on the risk characterization value and a predetermined risk threshold, whether the risk characterization value exceeds the predetermined risk threshold;

in response to determining that the risk characterization value exceeds the predetermined risk threshold, determining that the service operation is a risky operation; and

in response to determining that the risk characterization value does not exceed the predetermined risk threshold, determining the service operation is not a non-risky operation.

3. The computer-implemented method of claim 2, wherein the first identity verification operation comprises an identity verification operation performed by the user after a previous time the user passes identity verification of the application and before the user performs the requested service operation.

4. The computer-implemented method of claim 1, wherein determining whether the service operation is a risky operation comprises:

determining a first identity verification operation related to the service operation;

determining a risk characterization value of the first identity verification operation based on a first verification method corresponding to the first identity verification operation, the historical operation data, and at least one of the predetermined risk evaluation rule and risk evaluation model;

in response to determining that the risk characterization value of the first identity verification operation does not exceed a predetermined risk threshold, determining that the service operation is a non-risky operation; and

in response to determining that the risk characterization value of the first identity verification operation exceeds a predetermined risk threshold;

initiating backup identity verification to the user;

receiving a second identity verification operation performed by the user based on the backup identity verification;

determining a risk characterization value of the second identity verification operation based on a second verification method corresponding to the second identity verification operation, the historical operation data, and at least one of the predetermined risk evaluation rule and risk evaluation model;

determining whether the risk characterization value of the second identity verification operation exceeds the predetermined risk threshold;

in response to determining that the risk characterization value of the second identity verification operation exceeds the predetermined risk threshold, determining that the service operation is a risky operation; and

in response to determining that the risk characterization value of the second identity verification operation does not exceed the predetermined risk threshold, determining that the service operation is a non-risky operation.

5. The computer-implemented method of claim 4, wherein the first identity verification operation comprises an identity verification operation performed by the user after a previous time the user passes identity verification of the application and before the user performs the requested service operation.

6. The computer-implemented method of claim 4, wherein initiating backup identity verification to the user comprises:

selecting a second identity verification method from a predetermined identity verification method based on the first verification method and at least one of the predetermined risk evaluation rule and risk evaluation model; and

initiating backup identity verification to the user by using the selected second identity verification method.

7. The computer-implemented method of claim 1, wherein recording historical operation data comprises:

monitoring an operation performed by the user on the application program; and

determining operation data corresponding to the operation after the operation is monitored, and recording the operation data as the historical operation data; and

wherein the historical operation data comprises at least one of a total number of times of identity verification success or failure in a historical time, a number of times of identity verification success or failure within a predetermined time period, behavior data of using an online service by the user, behavior data of using an offline service by the user, and service environment data.

8. The computer-implemented method of claim 1, wherein offline service information comprises information needed for performing an offline service, and wherein the offline service information comprises a near field communication (NFC) signal, a unique digital object identifier (DOI), or a sound wave signal.

9. The computer-implemented method of claim 8, wherein the information needed for performing an offline services includes user account information and a service verification identifier.

10. The computer-implemented method of claim 1, wherein the risk evaluation rule and the risk evaluation model is dynamically adjusted based on a use environment of the application, wherein the use environment includes at least one of time of using the application and a number of times of starting and stopping the application.

11. The computer-implemented method of claim 1, wherein prior to invoking the offline service information, the method comprises obtaining historical operation data of previous operations performed by the user.

12. The computer-implemented method of claim 1, wherein the application program on the end-user device comprises client software and wherein the service operation initiated by the user comprises an offline payment operation;

and wherein

refusing to invoke the offline service information comprises rejecting the offline payment operation; and

invoking the offline service information comprises performing the offline payment operation.

13. A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

monitoring, by an application program on an end-user device, a service operation initiated by a user for invoking offline service information;

determining, after the service operation is monitored, whether the service operation is a risky operation based on recorded historical operation data and at least one of a predetermined risk evaluation rule or a risk evaluation model;

in response to determining that the service operation is a risky operation, refusing to invoke the offline service information; and

in response to determining that the service operation is not a risky operation, invoking the offline service information.

14. The computer-readable medium of claim 13, wherein determining whether the service operation is a risky operation comprises:

determining a first identity verification operation related to the service operation;

determining a risk characterization value of the first identity verification operation based on a first verification method corresponding to the first identity verification operation, the historical operation data, and at least one of the predetermined risk evaluation rule and risk evaluation model;

determining, based on the risk characterization value and a predetermined risk threshold, whether the risk characterization value exceeds the predetermined risk threshold;

in response to determining that the risk characterization value exceeds the predetermined risk threshold, determining that the service operation is a risky operation; and

in response to determining that the risk characterization value does not exceed the predetermined risk threshold, determining the service operation is not a non-risky operation.

15. The computer-readable medium of claim 14, wherein the first identity verification operation comprises an identity verification operation performed by the user after a previous time the user passes identity verification of the application and before the user performs the requested service operation.

16. The computer-readable medium of claim 13, wherein determining whether the service operation is a risky operation comprises:

determining a first identity verification operation related to the service operation;

determining a risk characterization value of the first identity verification operation based on a first verification method corresponding to the first identity verification operation, the historical operation data, and at least one of the predetermined risk evaluation rule and risk evaluation model;

in response to determining that the risk characterization value of the first identity verification operation does not exceed a predetermined risk threshold, determining that the service operation is a non-risky operation; and

in response to determining that the risk characterization value of the first identity verification operation exceeds a predetermined risk threshold;

initiating backup identity verification to the user;

receiving a second identity verification operation performed by the user based on the backup identity verification;

determining a risk characterization value of the second identity verification operation based on a second verification method corresponding to the second identity verification operation, the historical operation data, and at least one of the predetermined risk evaluation rule and risk evaluation model;

determining whether the risk characterization value of the second identity verification operation exceeds the predetermined risk threshold;

in response to determining that the risk characterization value of the second identity verification operation exceeds the predetermined risk threshold, determining that the service operation is a risky operation; and

in response to determining that the risk characterization value of the second identity verification operation does not exceed the predetermined risk threshold, determining that the service operation is a non-risky operation.

17. The computer-readable medium of claim 16, wherein initiating backup identity verification to the user comprises:

selecting a second identity verification method from a predetermined identity verification method based on the first verification method and at least one of the predetermined risk evaluation rule and risk evaluation model; and

initiating backup identity verification to the user by using the selected second identity verification method.

18. The computer-readable medium of claim 13, wherein recording historical operation data comprises:

monitoring an operation performed by the user on the application program; and

determining operation data corresponding to the operation after the operation is monitored, and recording the operation data as the historical operation data; and

wherein the historical operation data comprises at least one of a total number of times of identity verification success or failure in a historical time, a number of times of identity verification success or failure within a predetermined time period, behavior data of using an online service by the user, behavior data of using an offline service by the user, and service environment data.

19. The computer-readable medium of claim 13, wherein offline service information comprises information needed for performing an offline service, and wherein the offline service information comprises a near field communication (NFC) signal, a unique digital object identifier (DOI), or a sound wave signal, wherein the information needed for performing an offline services includes user account information and a service verification identifier.

20. A computer-implemented system, comprising:

one or more computers; and

one or more computer memory devices interoperably coupled with the one or more computers and having tangible, non-transitory, machine-readable media storing one or more instructions that, when executed by the one or more computers, perform one or more operations comprising;

monitoring, by an application program on an end-user device, a service operation initiated by a user for invoking offline service information;

determining, after the service operation is monitored, whether the service operation is a risky operation based on recorded historical operation data and at least one of a predetermined risk evaluation rule or a risk evaluation model;

in response to determining that the service operation is a risky operation, refusing to invoke the offline service information; and

in response to determining that the service operation is not a risky operation, invoking the offline service information.