Identity verification method and device based on mobile terminal

Abstract

The application provides an identity verification method and device based on a mobile terminal. The identity verification method comprises the following steps of: acquiring an identity verification request submitted by an browser side, wherein the identity verification request comprises user information and current Session ID; generating a corresponding verification identifier according to the user information and the current Session ID; returning the corresponding verification identifier according to a verification identifier acquisition request submitted by the mobile terminal; acquiring a verification identifier selection request submitted by the mobile terminal, extracting the Session ID of the corresponding verification identifier, and adding a verification passing mark to the Session ID; and judging whether user identity passes the verification or not according to the verification passing mark to the Session ID. The identity verification method and device provided by the application can improve the accuracy of the user identity verification and enhance the speed of the user identity verification.

Description

technical field [0001] The present application relates to the field of information security, in particular to a mobile terminal-based identity verification method and a mobile terminal-based identity verification device. Background technique [0002] With the rapid development of e-commerce in China, the information security of e-commerce website accounts is threatened. Because the account information is too simple (username + password), the user account is easy to be stolen. After the theft, criminals use the credit of the account to send illegal products. , Send phishing links or use account funds, which will bring heavy losses to users and websites. [0003] In order to improve security, OTP (One-time Password, one-time dynamic password) products based on mobile phones have appeared at present. This product is a program running on mobile phones. The randomly generated "seed" is pushed to the server to ensure that the seeds of the client and the server are consistent, the...

AI Technical Summary

Problems solved by technology

In reality, if the user account is stolen, and the user sends a verification request at the same time as the user sends a verification request, then in this very short period of time, there may be two verification requests on the server side. , if the OTP verification is passed, both requests may pass the verification, or only the request sent by the pirate

In this way, even if the user account is stolen, OTP's secondary verification cannot protect the security of user verification, and the verification accuracy is low

[0007] Secondly, after the server returns the dynamic password, the user needs to manually enter the dynamic password again. Manual input itself has certain risks. At present, some phishing software can obtain the user's identity information through this operation; secondly, the process of user input, sending and Receiving text messages will take a certain amount of time, making users need to wait for a long time to complete the verification operation

Images