Risk identification method and device and electronic equipment

Abstract

The invention provides a risk identification method and device and electronic equipment. The risk identification method and device are applied to a trusted execution environment of terminal equipment,wherein historical business requests and risk rules are stored in the trusted execution environment. The method comprises the following steps: in response to a to-be-sent service request initiated bya service client, obtaining a user account and a terminal identifier contained in the service request; querying a historical target service request which also has the user account and the equipment identifier in historical service requests, and performing statistical analysis on the historical target service request to obtain a numerical value of the risk index; judging whether the numerical value of the risk index reaches a threshold value set in a risk rule or not; deleting an equipment identifier carried in the to-be-sent service request, adding a judgment result, and sending the service request to a service server by the service client; and sending the business request to the business server to enable the business server to execute the business request based on the judgment result. The personal information of the user can be protected due to the fact that the device identifier is not sent outwards.

Description

technical field [0001] The embodiments of this specification relate to the field of Internet technologies, and in particular, to a risk identification method and device, and electronic equipment. Background technique [0002] With the continuous development of the Internet, especially the popularization of the mobile Internet, people can now access the Internet anytime and anywhere. But what follows is that the Internet security problem is becoming more and more serious, and various illegal activities with the help of the Internet are also becoming more and more rampant. [0003] In order to ensure Internet security, each service provider will deploy corresponding risk control strategies to deal with various attacks. For example, the business server will carry out risk identification on the business request initiated by each user, and judge whether there is risk in the business request, the user corresponding to the business request, and the terminal equipment used by the u...

AI Technical Summary

Problems solved by technology

But what follows is that the Internet security problem is becoming more and more serious, and various illegal activities with the help of the Internet are also becoming more and more rampant.

Images