A method and device for identity verification

Abstract

The embodiment of the present invention provides an identity verification method and device, which relate to the field of network security. The client obtains the user's face image and uploads the face image to the server, the server receives the face image and sends an image set to the client, the image set includes a preset image associated with the face image, and the client displays Preset the image and obtain the eye movement data that the user responds to the preset image. The client uploads the obtained eye movement data to the server, and the server compares the eye movement data with the preset eye movement data. When the acquired When the eye movement data meets the preset rules, the identity verification is passed. The above method can solve the defects of the one-way verification method of the existing identity authentication system through the two-way authentication method, and judge whether the server to be accessed is a fake server by verifying whether the image set contains a preset image, so as to avoid being The fake server defrauds personal information, and the password is hidden in the image, which is not easy to be peeped.

Description

technical field [0001] The invention relates to the field of network security, in particular to an identity verification method and device. Background technique [0002] At present, the commonly used identity authentication system adopts a one-way check method for authentication, and the system establishes a paired user name and password for each user. When the user logs in to the system, the user is prompted to enter his user name and password, and the system performs identity verification by checking whether the user name and password entered by the user match the user name and password of the user in the system. [0003] However, this authentication method has natural security flaws. First of all, the security of identity authentication is only based on the confidentiality of user passwords, and user passwords are generally short and easy to guess, so this scheme cannot effectively resist password guessing attacks; in addition, attackers may eavesdrop on communication ch...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the deficiencies of the above-mentioned prior art, the present invention provides an identity verification method and device to solve the defects of the one-way verification verification method of the existing identity verification system. The user verifies whether the image set contains a preset image Judging whether the server to be accessed is a fake server, so as to avoid being deceived by the fake server for personal information, and verifying the eye movement data of the image by the user, without direct contact between the user and the device, the password is hidden in the image and is not easy to be peeped, thereby eliminating the password leakage

Images