Authentication method and device

Abstract

The invention proposes a more efficient identity verification method and device. The method includes: the server receives a verification code pull request sent by a user terminal; randomly extracts a verification code and a password corresponding to the extracted verification code according to the verification code pull request, the verification code includes a first verification code picture, The first verification code picture is composed of multiple sub-pictures, and the password includes segmentation rules and placement rules corresponding to the multiple sub-pictures; the extracted verification code and password are sent to the user terminal so that the user terminal The segmentation rules and placement rules in the verification code are used to segment and rearrange multiple sub-pictures in the first verification code picture of the verification code to form the second verification code picture and display it to the user; and receive the returned by the user terminal, The identity of the user is verified according to the verification confirmation information input by the user according to the second verification code picture, and the verification result is returned to the user terminal.

Description

technical field [0001] The invention relates to the technical field of computer networks, in particular to an identity verification method and device. Background technique [0002] With the increasing popularity of computers and computer networks, the Internet has penetrated into all areas of people's work, study and life. While the development of the network provides convenience for people, it also brings various challenges. Some people will use robot programs to improperly use network resources in large quantities, such as mass spam, etc., which will greatly reduce server performance. There are also people who use the program to continuously send out service request responses to carry out "saturation attacks" to achieve the purpose of paralyzing the server. Some people even try to maliciously crack passwords by means of profiteering cracking. In order to avoid the above-mentioned malicious behaviors, it is very important to design a set of tools that can allow the compu...

AI Technical Summary

Problems solved by technology

Traditional image verification codes cannot avoid this problem. Taking character image verification codes as an example, if there are uppercase and lowercase characters and numbers, there are only 62 characters at most.

Therefore, the existing image verification codes have poor anti-cracking ability and insufficient security.

[0005] In order to improve the anti-cracking ability of the verification code, the research and development personnel developed the click verification code. When the click verification code is used, it usually shows the user multiple pictures containing natural objects and prompt information related to the content of these pictures. Select these pictures according to the prompt information, and verify the user's identity according to the user's choice. Since the machine has great difficulties in understanding the prompt information and classifying objects, it can greatly increase the number of machine cracking. Captcha Difficulty

[0006] However, when the verification code is used, multiple pictures need to be sent at a time. During a verification process, the server will receive multiple verification code pull requests from the user terminal, which will put a lot of pressure on the server and affect the identity Validation efficiency

Images