Method and device for verifying identity of user

Abstract

The embodiment of the invention provides a method and a device for verifying the identity of a user. The method specifically comprises the following steps of acquiring behavior data of the user; extracting the current behavior index of the behavior data; determining the cognitive parameters of the current behavior index; matching the cognitive parameters of the current behavior index with the cognitive parameter threshold value of the behavior model of the user to obtain a matched result or an unmatched result; wherein the cognitive parameter threshold value of the behavior model is obtained through training according to the historical dependable behavior data of the user; when the match result is obtained, the behavior data pass the verification, and when the unmatched result is obtained, the behavior data do not pass the verification. According to the method and the device, the continuous verification on the identity of the user can be realized.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method and device for verifying user identity. Background technique [0002] With the advent of the Internet era, the Internet is becoming more and more open, and there are more and more user devices, and users have higher and higher requirements for the security of personal information. The first hurdle in ensuring the security of personal information or electronic property is the accuracy of user authentication. A good user authentication mechanism should ensure that access to specific information is granted only when the correct user provides the correct authentication password. [0003] Traditional ways to verify user identity mainly include: static password, dynamic password, hardware token, digital certificate, biotechnology and other methods. However, the above-mentioned verification methods either have the problem of high cost. For example, hardware token...

AI Technical Summary

Problems solved by technology

However, the above-mentioned verification methods either have the problem of high cost. For example, hardware tokens require users to apply for corresponding devices in advance and associate with account settings, and they need to be carried with them when using them, which is relatively costly for service providers and users; or There are operational risks such as mobile phone Trojans, mailbox theft, forgotten answers, and password device loss

Moreover, the above verification methods cannot provide continuous verification. For example, after the user has passed the verification, the user performs a second high-risk operation within a short period of time, such as account modification, fund payment, etc. If the user chooses to perform identity verification again, it will be Poor user experience and risk of session hijacking if you choose not to authenticate

Images