TWM661771U - Monitoring system - Google Patents

Abstract

A monitoring system is provided, which includes a communication connector and a processor. The communication connector is used to receive transaction data from front-end system. The processor is used to drive operation of a transaction management platform and a multi-functional monitoring platform. The transaction management platform is used to scan the transaction data to generate scan result. The multi-functional monitoring platform is used to monitor whether the operation of the transaction management platform is abnormal and sent a notification when an abnormality in the operation of the transaction management platform is detected.

Description

Monitoring system

The novel invention relates to a monitoring mechanism, and in particular to a monitoring system for financial transactions.

In today's financial security framework, it is particularly important to ensure the legality and transparency of transactions. For financial institutions, effectively combating financial crimes and preventing money laundering have become urgent issues that need to be resolved. Due to the nature of financial transactions involving large and complex data sets, traditional manual review processes can no longer meet the needs for efficient monitoring and auditing. Automated investigation of consumer sources of funds faces many technical challenges, including how to accurately identify the actual beneficiaries behind the transaction, how to track the flow of funds in cross-border transactions, and how to process and analyze the growing amount of transaction data. Based on this, a monitoring system has been developed to prevent illegal financial activities. How to ensure that this monitoring system can operate normally is one of the issues currently to be resolved.

This novel invention provides a monitoring system for monitoring a transaction management platform for scanning transaction data, and can instantly detect whether there is any abnormality in the transaction management platform.

The monitoring system of the invention includes: a communication connector for receiving transaction data from a front-end system; and a processor, which is connected to the communication connector and used to drive the operation of a transaction management platform and a multi-function monitoring platform. The transaction management platform scans the transaction data to generate a scanning result. The multi-function monitoring platform is connected to the transaction management platform and used to monitor whether the operation of the transaction management platform is abnormal, and send a notification when an abnormal operation of the transaction management platform is detected.

In one embodiment of the present invention, the communication connector, processor, transaction management platform and multi-function monitoring platform are arranged in the same electronic device, and the electronic device further comprises: a message transmission queue for receiving transaction data received by the communication connector and transmitting the scanning result to the front-end system through the communication connector. In addition, the transaction management platform is used to establish a connection with the message transmission queue to access the transaction data in the message transmission queue.

In one embodiment of the present invention, the multifunctional monitoring platform includes: a transaction income monitoring module, which monitors the message transmission queue through a network server to determine whether the income of transaction data is abnormal.

In one embodiment of the present novel creation, the above-mentioned transaction management platform includes: a database; an adapter for receiving transaction data; an analysis module for performing transaction analysis on the transaction data received from the adapter to obtain analysis results, and recording transaction comparison records corresponding to the transaction data in the database; and a scanning service module for performing a list comparison on the analysis results received from the analysis module and generating scanning results, and in response to generating the scanning results, updating the transaction comparison records corresponding to the transaction data recorded in the database.

In one embodiment of the present invention, the above analysis module provides a log file. The multifunctional monitoring platform includes: a user synchronization scheduling monitoring module for determining whether the log file is abnormal.

In one embodiment of the present invention, the multifunctional monitoring platform includes: a list monitoring module for transmitting a call to the scanning service module and determining whether the operation of the scanning service module is abnormal based on the query result returned by the scanning service module. The analysis module queries the control list in response to receiving the call and transmits the query result to the list monitoring module.

In one embodiment of the present novel creation, the multifunctional monitoring platform includes: a scanning result monitoring module for querying whether the transaction comparison record corresponding to the transaction data recorded in the database has been updated, and if the transaction comparison record has not been updated, determining that the transaction data is abnormal.

In one embodiment of the present invention, the scanning service module provides a conversion schedule to convert the control list at a specified time and store the converted results in a database. The multifunctional monitoring platform includes: a list conversion monitoring module to query the conversion results in the database and determine whether the conversion schedule is abnormal based on the conversion results.

In one embodiment of the present invention, the multifunctional monitoring platform sends notifications to a designated device via a Web Application Program Interface (Web API).

In one embodiment of the present novel creation, the multifunctional monitoring platform sends a notification to a mail server via Simple Mail Transfer Protocol (SMTP), so that the notification is sent via the mail server based on an email address.

Based on the above, this new monitoring system provides comprehensive monitoring of system operation, transaction scanning and processing, batch operation status, etc.

Fig. 1 is a schematic diagram of a monitoring system according to an embodiment of the present invention. Referring to Fig. 1, the monitoring system 100 includes a processor 110, a memory 120 and a communication connector 130. The processor 110 is in communication connection with the memory 120 and the communication connector 130 respectively.

The processor 110 is, for example, a central processing unit (CPU), a physical processing unit (PPU), a programmable microprocessor, an embedded control chip, a digital signal processor (DSP), an application specific integrated circuit (ASIC), or other similar devices.

The memory 120 is, for example, any type of fixed or removable random access memory (RAM), read-only memory (ROM), flash memory, hard disk or other similar device or a combination of these devices. The memory 120 includes at least one or more code segments, which are executed by the processor 110 after being installed.

In this embodiment, the memory 120 includes a first application and a second application. The first application is executed by the processor 110 to implement the operation of the transaction management platform 210. The second application is executed by the processor 110 to implement the operation of the multi-function monitoring platform 220. The communication connector 130 is used to receive transaction data from the front-end system. The transaction management platform 210 is used to communicate with the communication connector 130 and scan the transaction data to generate a scan result. The multi-function monitoring platform 220 is used to communicate with the transaction management platform 210 and monitor whether the operation of the transaction management platform 210 is abnormal, and send a notification when an abnormal operation of the transaction management platform 210 is detected.

The communication connector 130 may be a chip or circuit using a local area network (LAN) technology, a wireless local area network (WLAN) technology, or a mobile communication technology. An example of a local area network is Ethernet. An example of a wireless local area network is Wi-Fi. An example of a mobile communication technology is the Global System for Mobile Communications (GSM), the third-generation mobile communication technology (3G), the fourth-generation mobile communication technology (4G), the fifth-generation mobile communication technology (5G), etc.

FIG2 is a schematic diagram of the overall architecture of a monitoring system according to an embodiment of the present invention. Referring to FIG2, the monitoring system 100 includes an electronic device 200 and a network server 250. The network server 250 is set in a server device different from the electronic device 200. In this embodiment, the processor 110, the storage 120 and the communication connector 130 shown in FIG1 are set in the electronic device 200, while the transaction management platform 210, the multi-function monitoring platform 220, the message delivery queue 230 and the scheduler 240 run in the electronic device 200 and are executed by the processor 110.

The transaction management platform 210 adopts the Financial Crime and Compliance Management (FCCM) architecture, and its main functions include: Anti-Money Laundering (AML), identifying potential money laundering activities by analyzing and monitoring transaction data; Countering the financing of terrorism (CFT), analyzing transaction data and determining whether the transaction data is financing activities related to terrorism; Compliance monitoring, monitoring and reviewing transaction data to ensure compliance with the compliance requirements of international and local regulatory agencies, and reporting and record retention accordingly; Risk assessment, assessing the risks of customers and transactions, and formulating appropriate control and monitoring measures based on risk situations; and supporting investigation and reporting of suspicious transactions.

The message transmission queue 230 is used to receive the transaction data received by the communication connector 130, and transmit the scanning result of the transaction management platform 210 to the front-end system 150 through the communication connector 130. The front-end system 150 is, for example, a deposit and withdrawal host in the financial industry, or other servers used for financial transactions.

The message delivery queue 230 is, for example, a message-oriented middleware. In one embodiment, the message delivery queue 230 includes a message queue and an error queue. The message queue is used to store received transaction data, and the error queue is used to store error messages. The error message refers to an error message generated when the format of the transaction data does not conform to the specified format.

The transaction management platform 210 includes an adapter 211, an analysis module 212, a scanning service module 213, and a database 214. The adapter 211 is used to receive transaction data from the message delivery queue 230. In one embodiment, the adapter 211 is implemented by, for example, a Java Message Service (JVM) application programming interface (API).

The analysis module 212 is used to perform transaction analysis (e.g., identifying money laundering, terrorist financing, etc.) on the transaction data received by the adapter 211 to obtain the analysis results and transmit the analysis results to the scanning service module 213, and record the transaction comparison records corresponding to the transaction data in the database 214. For example, the analysis module 212 provides the function of managing and maintaining the watch list (e.g., the watch list of the European Union, the Office of Foreign Assets Control, the United Nations, etc.). In addition, the analysis module 212 can also synchronize all user information to the database 214 through the single sign-on (SSO) system at regular intervals. The analysis module 212 further provides a log file to record the batch synchronization results each time in the log file.

The scanning service module 213 is used to perform a list comparison on the analysis results received from the analysis module 212 to confirm whether the transaction hits the sanction or the transaction party falls into the control list, thereby generating a scanning result and transmitting the scanning result back to the analysis module 212, so that the analysis module 212 updates the transaction comparison record corresponding to the transaction data recorded in the database 214 based on the scanning result. The scanning service module 213 is, for example, an Enterprise Data Quality (EDQ) scanning service, which provides scanning services such as name, Bank Identifier Code (BIC), country, city port, and full text scanning. According to the type of scan sent by the analysis module 212, it uses precise or fuzzy matching to compare whether it hits the sanctions and/or control list, and then generates a scanning result. The scanning service module 213 sends the scanning result back to the analysis module 212, and the analysis module 212 will further generate a case based on the scanning result, such as hitting the control list, to assign the case to the corresponding person in charge, so that the person in charge can judge whether there is a problem with the scanning result and further modify or update it.

The multi-function monitoring platform 220 is implemented using the .NET core programming language, which supports cross-platform deployment, can quickly expand monitoring items, and supports multiple communication methods to read system information. The multi-function monitoring platform 220 includes a transaction income monitoring module 221, a user synchronization scheduling monitoring module 222, a list monitoring module 223, a scan result monitoring module 224, and a list conversion monitoring module 225. The scheduler 240 is used to set the time interval for the scheduled execution of the transaction income monitoring module 221, the user synchronization scheduling monitoring module 222, the list monitoring module 223, the scan result monitoring module 224, and the list conversion monitoring module 225. The scheduler 240 is implemented, for example, by using a task management tool (such as a crontab command) of a Unix-like system. The scheduler 240 is used to set tasks to be executed at a scheduled time.

The transaction income monitoring module 221 monitors the message delivery queue 230 through the network server 250 to determine whether the transaction data income is abnormal. For example, the transaction income monitoring module 221 sends instructions to the network server 250 through the Web application program interface (Web API), and the network server 250 integrates and interacts with the message delivery queue 230 through the extended messaging service (eXtended Messaging Service, XMS).

In one embodiment, when the transaction management platform 210 wants to access the message delivery queue 230, the transaction management platform 210 will establish a connection with the message delivery queue 230. After the connection is established, the transaction management platform 210 can receive transaction data from the message delivery queue 230. If the transmission and reception are abnormal, the connection between the transaction management platform 210 and the message delivery queue 230 will be disconnected, or the connection cannot be established.

The transaction income monitoring module 221 can determine whether the transaction data income is abnormal based on the number of connections between the transaction management platform 210 and the message transmission queue 230. For example, when the number of connections is less than 2, it is determined that the transaction data income is abnormal. Alternatively, the transaction income monitoring module 221 can also determine whether the transaction data income is abnormal based on the error message recorded in the error queue.

The user synchronization schedule monitoring module 222 is used to read the daily user synchronization schedule log file (LOG) in the analysis module 212 through the DOTNET CORE System.io package to determine whether the log file is abnormal.

The list monitoring module 223 is used to send a call to the scanning service module 213, and determine whether the operation of the scanning service module 213 is abnormal based on the query result returned by the scanning service module 213. In response to receiving the call, the scanning service module 213 queries the control list and sends the query result to the list monitoring module 223. Specifically, the list monitoring module 223 will periodically scan the existing control list to determine whether the scanning service module 213 is operating normally. For example, the list monitoring module 223 can send a call with a query for a designated person to the scanning service module 213 through the Web API, so that the scanning service module 213 queries whether the designated person exists in the control list, and returns the query result to the list monitoring module 223. If the query result is that the designated person does not exist, the list monitoring module 223 determines that an abnormality has occurred. If the query result is that the designated person is included in the control list, the list monitoring module 223 determines that the scanning service module 213 can operate normally.

The scanning result monitoring module 224 is used to check whether the transaction comparison record corresponding to the transaction data recorded in the database 214 has been updated, and if the transaction comparison record has not been updated, the transaction data is determined to be abnormal. Specifically, when the transaction data is transmitted from the adapter 211 to the analysis module 212, the analysis module 212 will write the transaction comparison record corresponding to the transaction data in the database 214. After the scanning service module 213 performs a list comparison on the analysis result and generates a scanning result, it will update the transaction comparison record corresponding to the transaction data in the database 214. For example, a flag is set in the transaction comparison record in the database 214, and the initial value of the flag is 0 (not updated yet), and after the scanning service module 213 generates the scanning result, the value of the flag is set to 1 (updated state). Accordingly, the scanning result monitoring module 224 can determine whether the scanning service module 213 has completed the scanning by querying the flag of the transaction data in the database 214.

If there is an abnormality in the transmission between the analysis module 212 and the scanning service module 213, or if there is an abnormality in the operation of the scanning service module 213, the corresponding transaction comparison record in the database 214 will not be updated. If the transaction comparison record is not updated, it means that there is an abnormality in the transmission between the analysis module 212 and the scanning service module 213, or if there is an abnormality in the operation of the scanning service module 213. In actual practice, a threshold value (e.g., 15 minutes) can be set. If the transaction comparison record of this transaction data is not updated within 15 minutes, it means that this transaction data is not scanned normally.

The scanning service module 213 also provides a conversion schedule to convert the control list at a specified time and store the converted results in the database 214. The list conversion monitoring module 225 is used to query the conversion results in the database 214 and determine whether the conversion schedule is abnormal based on the conversion results. Specifically, the transaction management platform 210 will download the latest control list regularly. After the new control list is downloaded, the scanning service module 213 will review the new control list to delete unnecessary data and execute the conversion schedule for the new control list. After the conversion schedule is completed, fill in the flag corresponding to the conversion success or conversion failure to the conversion result of the database 214. The list conversion monitoring module 225 queries the conversion result in the database 214 to know whether the conversion is successful or failed.

The scanning result monitoring module 224 and the list conversion monitoring module 225 can interact with the database 214 through the database access library ADO.NET of DOTNET CORE.

In one embodiment, when the multi-function monitoring platform 220 detects an abnormality, it can send a notification to a designated device through a Web API. For example, the designated device is an IT information monitoring system used to monitor and manage various systems, applications, services, and networks in an information technology (IT) infrastructure.

In another embodiment, when the multi-function monitoring platform 220 detects an abnormality, it can send a notification to a mail server via Simple Mail Transfer Protocol (SMTP), so as to send a notification based on an email address via the mail server.

In summary, this new monitoring system provides comprehensive monitoring of system operation, transaction scanning and processing, batch operation status, etc. Moreover, the monitoring system is applicable to the FCCM architecture, and various functional statuses can be monitored on the transaction management platform through the multi-functional monitoring platform. For known errors, error messages can be received in time, and then the anomalies can be eliminated online. For unknown errors, monitoring can be quickly expanded after analysis to improve monitoring items.

100: Monitoring system 110: Processor 120: Storage 130: Communication connector 150: Front-end system 200: Electronic device 210: Transaction management platform 211: Adapter 212: Analysis module 213: Scanning service module 214: Database 220: Multi-function monitoring platform 221: Transaction income monitoring module 222: User synchronization scheduling monitoring module 223: List monitoring module 224: Scanning result monitoring module 225: List conversion monitoring module 230: Message transmission queue 240: Scheduler 250: Network server

FIG1 is a schematic diagram of a monitoring system according to an embodiment of the present invention. FIG2 is a schematic diagram of the overall architecture of a monitoring system according to an embodiment of the present invention.

100: Monitoring system

110: Processor

120: Storage

130: Communication connector

210: Transaction management platform

220: Multifunctional monitoring platform

Claims (10)

A monitoring system includes: a communication connector for receiving transaction data from a front-end system; and a processor, which is connected to the communication connector for communication and used to drive the operation of a transaction management platform and a multi-function monitoring platform, wherein the transaction management platform is used to scan the transaction data to generate a scanning result; the multi-function monitoring platform is connected to the transaction management platform for communication and used to monitor whether the operation of the transaction management platform is abnormal, and send a notification when the operation of the transaction management platform is detected to be abnormal. The monitoring system as described in claim 1, wherein the communication connector, the processor, the transaction management platform and the multi-functional monitoring platform are arranged in the same electronic device, and the electronic device further comprises: A message transmission queue for receiving the transaction data received by the communication connector and transmitting the scanning result to the front-end system through the communication connector; wherein the transaction management platform is used to establish a connection with the message transmission queue to access the transaction data in the message transmission queue. The monitoring system as described in claim 2, wherein the multifunctional monitoring platform comprises: A transaction income monitoring module, which monitors the message transmission queue through a network server to determine whether the income of the transaction data is abnormal. The monitoring system as described in claim 1, wherein the transaction management platform comprises: a database; an adapter for receiving the transaction data; an analysis module for performing a transaction analysis on the transaction data received from the adapter to obtain an analysis result, and recording a transaction comparison record corresponding to the transaction data in the database; and a scanning service module for performing a single comparison on the analysis result received from the analysis module and generating the scanning result, and transmitting the scanning result to the analysis module, so that the analysis module updates the transaction comparison record corresponding to the transaction data recorded in the database based on the scanning result. The monitoring system as described in claim 4, wherein the analysis module provides a log file, and the multifunctional monitoring platform includes: a user synchronization scheduling monitoring module for determining whether the log file is abnormal. The monitoring system as described in claim 4, wherein the multifunctional monitoring platform comprises: a single monitoring module for transmitting a call to the scanning service module and determining whether the operation of the scanning service module is abnormal based on a query result returned by the scanning service module, wherein the analysis module queries a control list in response to receiving the call and transmits the query result to the list monitoring module. The monitoring system as described in claim 4, wherein the multifunctional monitoring platform comprises: A scanning result monitoring module for querying whether the transaction comparison record corresponding to the transaction data recorded in the database has been updated, and if the transaction comparison record has not been updated, determining that the transaction data is abnormal. The monitoring system as described in claim 4, wherein the scanning service module provides a conversion schedule to convert a control list at a specified time and stores a conversion result after conversion to the database. The multifunctional monitoring platform includes: A list conversion monitoring module for querying the conversion result in the database and judging whether the conversion schedule is abnormal based on the conversion result. A monitoring system as described in claim 1, wherein the multifunctional monitoring platform sends the notification to a designated device via a network application programming interface. A monitoring system as described in claim 1, wherein the multifunctional monitoring platform sends the notification to a mail server via a simple mail transmission protocol, so as to send the notification based on an email address via the mail server.

Images