Intelligent identity authentication system

Abstract

The invention provides an intelligent identity authentication system. The intelligent identity authentication system comprises an authentication client SDK, an authentication server SDK, an authentication service proxy device, an authentication server, an authentication analysis engine and a cloud service platform, wherein the authentication client SDK is used for acquiring client information of authenticated users; the authentication server SDK is used for checking service strategies, and executing and forwarding information of an authentication client; the authentication service proxy device is used for providing a server reverse proxy when the authentication server SDK cannot implement an authentication function; the authentication server is used for managing the service strategies, authentication modes and cases, and displaying authentication analysis results; the authentication analysis engine is used for performing risk analysis based on a risk control model, wherein the risk analysis includes the steps of performing risk level scoring based on predefined rules and implementing big data analysis in combination with a big data analysis engine; and the cloud service platform dynamically adjusts identity authentication modes and requirements according to risk analysis results of the authentication server and the authentication analysis engine, performs identity authentication for the users, and returns an authentication result to the authentication analysis engine. According to the intelligent identity authentication system provided by the invention, an appropriate identity authentication mode can be selected for the users based on a risk analysis method.

Description

Technical field [0001] The invention relates to the technical field of identity authentication, in particular to an intelligent identity authentication system. Background technique [0002] Internet fraud is becoming the main mode of cybercrime at present. The hacking incident of Sony and the leak of Citigroup user information are all swaying cyber fraud. [0003] At present, the attack methods of online fraud and phishing have become more abundant and more targeted. They no longer carry out general attacks, but carry out "spear-gun" precise attacks against a certain group of people. Sony and Citigroup are the victims of such precision attacks. Malicious attackers may invade hotels and hotel systems to obtain VIP customer information, such as customer points, etc. The malicious intruders obtain this information and convert them into securities to obtain economic benefits. [0004] Judging from several recent intrusions, the purpose of malicious attackers is very clear, which is to ...

AI Technical Summary

Problems solved by technology

[0014] Phishing, data leaks, and "crashing into databases" have led to underground hackers mastering a large number of account passwords, and various development vulnerabilities that have been exposed frequently have also made the password security situation worse.

Images