Dynamic identity authentication method and device, server and storage medium

Abstract

The embodiment of the invention discloses a dynamic identity authentication method and device, a server and a storage medium. The method comprises the steps of obtaining user agent information in an identity authentication request corresponding to a login behavior, obtaining corresponding trust scores and weight values, and calculating a total score of the identity authentication request; if the total score is lower than a trust threshold, triggering an authentication mode corresponding to a score segment to which the total score belongs; updating the trust score of each dimension in the user agent information according to the authentication result and a preset score adjustment model, and recalculating the total score according to each adjusted trust score and the corresponding weight value, wherein the score adjustment model is used for indicating configuration information for adjusting the trust score of each dimension in the user agent information according to the authentication result; and determining an identity authentication result of the login behavior according to a comparison result of the recalculated total score and the trust threshold and the authentication result. According to the embodiment of the invention, dynamic identity authentication is carried out on the login behavior, so that the security of identity authentication is improved.

Description

technical field [0001] The embodiment of the present invention relates to identity authentication technology, and in particular to a dynamic identity authentication method, device, server and storage medium. Background technique [0002] All software systems are inseparable from identity authentication, and identity authentication needs to take into account both security and convenience. To a certain extent, this puts forward higher requirements for identity authentication. [0003] The traditional authentication system adopts the mechanism of strong factor authentication (such as face) or multi-factor authentication, and the information security level protection system also clearly requires the use of two or more combinations of passwords, cryptography, biometrics and other authentication technologies to identify users. authentication, and at least one of the authentication techniques shall be implemented using cryptographic techniques. For example, the simple user passwo...

AI Technical Summary

Problems solved by technology

For example, the simple user password authentication mechanism currently on the market, the more complicated one triggers account or IP lockout policies based on the number of user access failures, etc.

[0004] But these are usually fixed policies. After zero trust is widely concerned and introduced, the visitors at the access entrance can be other illegal users such as other hacking software besides users, and the terminals accessed are becoming more and more complex.

Traditional certification obviously cannot meet the requirements of the current complex use environment

Images