Authentication method, device, equipment and computer-readable storage medium

Abstract

The present invention discloses an identity authentication method, device, equipment and computer-readable storage medium, which relates to the field of financial technology. The method comprises the following steps: when an operation request is detected, user identity data carried by the operation request is obtained; based on the user identity data and a preset rule filter, whether the operation request is legal is verified, and the preset rule filter includes an array of illegal identity data; if the operation request is legal, the operation request is executed according to a preset business operation process. The operation request is intercepted when the operation request is detected, and after the operation request is verified to be legal based on the user identity data carried by the operation request and the preset rule filter including the array of illegal identity data, the operation request is released to execute the operation request, thereby filtering illegal requests through the preset rule filter to reduce the operating pressure of the background server, thereby improving the efficiency of the identity authentication process.

Description

Technical Field

[0001] The present invention relates to the field of information retrieval technology of financial technology (Fintech), and in particular to an identity authentication method, device, equipment and computer-readable storage medium. Background Art

[0002] With the development of computer technology, more and more technologies (big data, distributed, blockchain, artificial intelligence, etc.) are being applied in the financial field. The traditional financial industry is gradually transforming to financial technology (Fintech). However, due to the security and real-time requirements of the financial industry, higher requirements are also placed on technology.

[0003] The development of computer technology is accompanied by a substantial increase in network access traffic. The huge instantaneous access traffic will cause tremendous pressure on the backend server and database. Among the massive access requests, there are often illegal access requests.

[0004] The method of filtering illegal access requests in the prior art to relieve the pressure on the backend server and database is to filter illegal requests through blacklists. When the amount of data is small and the amount of business requests is not large, the blacklist query system performs pure DB (datebase, database) query and retrieval, and the query efficiency is high and basically meets the business needs. However, as the business grows, the blacklist query system has to cope with the daily level of tens of millions, and the amount of blacklist data has also reached tens of millions. The performance bottleneck of DB-based query and retrieval is prone to service timeouts, and the timeout situation will increase with the increase in the number of requests and the number of concurrent requests, resulting in a large number of abnormal situations such as request timeout fuses and transaction losses, which affects the efficiency and experience of the access party calling the blacklist query service. Summary of the invention

[0005] The main purpose of the present invention is to provide an identity authentication method, device, equipment and computer-readable storage medium, aiming to filter illegal requests through preset rule filters to reduce the operating pressure of the background server.

[0006] To achieve the above object, the present invention provides an identity authentication method, which comprises the following steps:

[0007] When an operation request is detected, obtaining user identity data carried in the operation request;

[0008] Verify whether the operation request is legal based on the user identity data and a preset rule filter, wherein the preset rule filter includes an array of illegal identity data;

[0009] If the operation request is legal, the operation request is executed according to the preset business operation process.

[0010] Optionally, the step of verifying whether the operation request is legal based on the user identity data and a preset rule filter includes:

[0011] Verify whether the user identity data matches the preset rule filter;

[0012] If the user identity data does not match the preset rule filter, the operation request is determined to be legal.

[0013] Optionally, after the step of verifying whether the user identity data matches the preset rule filter, the step further includes:

[0014] If the user identity data hits the preset rule filter, query the blacklist database to determine whether the user identity data exists in the blacklist database, and the blacklist database stores illegal identity data;

[0015] If the user identity data exists in the blacklist database, the operation request is determined to be illegal;

[0016] If the user identity data does not exist in the blacklist database, the operation request is determined to be legal.

[0017] Optionally, the step of verifying whether the user identity data matches the preset rule filter includes:

[0018] The user identity data is subjected to a preset function operation to obtain a corresponding function value;

[0019] Determining whether the corresponding bits of the function values ​​in the array are all first preset values;

[0020] If the function values ​​in the corresponding bits of the array are all first preset values, it is determined that the user identity data hits the preset rule filter;

[0021] If the function value has a second preset value in the corresponding bit of the array, it is determined that the user identity data does not hit the preset rule filter.

[0022] Optionally, before the step of verifying whether the operation request is legal based on the user identity data and a preset rule filter, the step further includes:

[0023] Obtain a preset rule filter issued by an offline computing terminal, wherein the preset rule filter is constructed by the offline computing terminal according to a preset construction frequency and / or based on a blacklist database when the amount of change in illegal identity data in the blacklist database is greater than a preset change threshold.

[0024] Optionally, after the step of obtaining the preset rule filter sent by the offline computing terminal, the method further includes:

[0025] Determine whether the preset rule filter sent by the offline computing terminal is successfully obtained;

[0026] If the preset rule filter sent by the offline computing terminal is successfully obtained, the steps are executed: verifying whether the operation request is legal based on the user identity data and the preset rule filter;

[0027] If the preset rule filter sent by the offline computing terminal is not obtained, whether the operation request is legal is determined based on whether the user identity data exists in the blacklist database.

[0028] Optionally, after the step of verifying whether the operation request is legal based on the user identity data and a preset rule filter, wherein the preset rule filter includes an array of illegal identity data, the step further includes:

[0029] If the operation request is illegal, a warning prompt is returned to the terminal that initiated the operation request.

[0030] Furthermore, in order to achieve the above object, the present invention also provides an identity authentication device, the identity authentication device comprising:

[0031] A detection module, configured to, when an operation request is detected, obtain user identity data carried in the operation request;

[0032] A verification module, used to verify whether the operation request is legal based on the user identity data and a preset rule filter, wherein the preset rule filter includes an array of illegal identity data;

[0033] The execution module is used to execute the operation request according to a preset business operation process if the operation request is legal.

[0034] Furthermore, to achieve the above-mentioned purpose, the present invention also provides an identity authentication device, which includes a memory, a processor, and an identity authentication program stored in the memory and executable on the processor, and the identity authentication program, when executed by the processor, implements the steps of the identity authentication method described above.

[0035] Furthermore, to achieve the above-mentioned purpose, the present invention also provides a computer-readable storage medium, on which an identity authentication program is stored, and when the identity authentication program is executed by a processor, the steps of the identity authentication method described above are implemented.

[0036] The present invention obtains the user identity data carried by the operation request when the operation request is detected; verifies whether the operation request is legal based on the user identity data and a preset rule filter, wherein the preset rule filter includes an array of illegal identity data; if the operation request is legal, the operation request is executed according to a preset business operation process. The operation request is intercepted when the operation request is detected, and after the operation request is verified to be legal based on the user identity data carried by the operation request and the preset rule filter including the array of illegal identity data, the operation request is released to execute the operation request, thereby filtering illegal requests through the preset rule filter to reduce the operating pressure of the background server, thereby improving the efficiency of the identity authentication process. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Figure 1 A schematic diagram of the structure of the device hardware operating environment involved in the embodiment of the identity authentication device of the present invention;

[0038] Figure 2 A schematic diagram of a flow chart of a first embodiment of an identity authentication method of the present invention;

[0039] Figure 3 Schematic diagram of the functional modules of the identity authentication device of the present invention.

[0040] The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0041] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0042] It should be noted that the method of filtering illegal access requests in the prior art to relieve the pressure on the backend server and database is to filter illegal requests through blacklists. When the amount of data is small and the amount of business requests is not large, the blacklist query system performs pure DB (datebase, database) query and retrieval, and the query efficiency is high and basically meets the business needs. However, as the business grows, the blacklist query system has to cope with the daily level of tens of millions, and the amount of blacklist data has also reached tens of millions. The performance bottleneck of DB-based query and retrieval is prone to service timeouts, and the timeout situation will increase with the increase in the number of requests and the number of concurrent requests, resulting in a large number of abnormal situations such as request timeout fuses and transaction losses, which affects the efficiency and experience of the access party calling the blacklist query service.

[0043] Based on the above-mentioned defects, the present invention provides an identity authentication device, referring to Figure 1 , Figure 1 It is a schematic diagram of the structure of the device hardware operating environment involved in the embodiment of the identity authentication device of the present invention.

[0044] like Figure 1 As shown, the identity authentication device may include: a processor 1001, such as a CPU, a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005. Among them, the communication bus 1002 is used to realize the connection and communication between these components. The user interface 1003 may include a display screen (Display), an input unit such as a keyboard (Keyboard), and the optional user interface 1003 may also include a standard wired interface and a wireless interface. The network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a WI-FI interface). The memory 1005 may be a high-speed RAM memory, or a stable memory (non-volatile memory), such as a disk memory. The memory 1005 may optionally be a storage device independent of the aforementioned processor 1001.

[0045] Those skilled in the art will understand that Figure 1 The hardware structure of the identity authentication device shown in the figure does not constitute a limitation of the identity authentication device, and may include more or fewer components than shown in the figure, or a combination of certain components, or a different arrangement of components.

[0046] like Figure 1 As shown, the memory 1005 as a computer-readable storage medium may include an operating system, a network communication module, a user interface module, and an identity authentication program. The operating system is a program for managing and controlling identity authentication devices and software resources, and supports the operation of the network communication module, the user interface module, the identity authentication program, and other programs or software; the network communication module is used to manage and control the network interface 1004; and the user interface module is used to manage and control the user interface 1003.

[0047] exist Figure 1 In the hardware structure of the identity authentication device shown, the network interface 1004 is mainly used to connect to the background server and communicate data with the background server; the user interface 1003 is mainly used to connect to the client (user end) and communicate data with the client; the processor 1001 can call the identity authentication program stored in the memory 1005 and perform the following operations:

[0048] When an operation request is detected, obtaining user identity data carried in the operation request;

[0049] Verify whether the operation request is legal based on the user identity data and a preset rule filter, wherein the preset rule filter includes an array of illegal identity data;

[0050] If the operation request is legal, the operation request is executed according to the preset business operation process.

[0051] Further, the step of verifying whether the operation request is legal based on the user identity data and a preset rule filter includes:

[0052] Verify whether the user identity data matches the preset rule filter;

[0053] If the user identity data does not match the preset rule filter, the operation request is determined to be legal.

[0054] Further, after the step of verifying whether the user identity data matches the preset rule filter, the processor 1001 is further configured to call the identity authentication program stored in the memory 1005 and perform the following operations:

[0055] If the user identity data hits the preset rule filter, query the blacklist database to determine whether the user identity data exists in the blacklist database, and the blacklist database stores illegal identity data;

[0056] If the user identity data exists in the blacklist database, the operation request is determined to be illegal;

[0057] If the user identity data does not exist in the blacklist database, the operation request is determined to be legal.

[0058] Furthermore, the step of verifying whether the user identity data matches the preset rule filter includes:

[0059] The user identity data is subjected to a preset function operation to obtain a corresponding function value;

[0060] Determining whether the corresponding bits of the function values ​​in the array are all first preset values;

[0061] If the function values ​​in the corresponding bits of the array are all first preset values, it is determined that the user identity data hits the preset rule filter;

[0062] If the function value has a second preset value in the corresponding bit of the array, it is determined that the user identity data does not hit the preset rule filter.

[0063] Furthermore, before the step of verifying whether the operation request is legal based on the user identity data and the preset rule filter, the processor 1001 is further configured to call an identity authentication program stored in the memory 1005 and perform the following operations:

[0064] Obtain a preset rule filter issued by an offline computing terminal, wherein the preset rule filter is constructed by the offline computing terminal according to a preset construction frequency and / or based on a blacklist database when the amount of change in illegal identity data in the blacklist database is greater than a preset change threshold.

[0065] Further, after the step of obtaining the preset rule filter sent by the offline computing terminal, the processor 1001 is further configured to call the identity authentication program stored in the memory 1005 and perform the following operations:

[0066] Determine whether the preset rule filter sent by the offline computing terminal is successfully obtained;

[0067] If the preset rule filter sent by the offline computing terminal is successfully obtained, the steps are executed: verifying whether the operation request is legal based on the user identity data and the preset rule filter;

[0068] If the preset rule filter sent by the offline computing terminal is not obtained, whether the operation request is legal is determined based on whether the user identity data exists in the blacklist database.

[0069] Further, after the step of verifying whether the operation request is legal based on the user identity data and the preset rule filter, wherein the preset rule filter includes an array of illegal identity data, the processor 1001 is further configured to call the identity authentication program stored in the memory 1005, and perform the following operations:

[0070] If the operation request is illegal, a warning prompt is returned to the terminal that initiated the operation request.

[0071] The specific implementation of the identity authentication device of the present invention is basically the same as the various embodiments of the identity authentication method described below, and will not be repeated here.

[0072] The invention also provides an identity authentication method.

[0073] The embodiment of the present invention provides an embodiment of the identity authentication method. It should be noted that although a logical order is shown in the flow chart, in some cases, the steps shown or described may be executed in an order different from that shown here.

[0074] In various embodiments of the identity authentication method, for the sake of convenience, the execution subject is omitted to illustrate various embodiments. Figure 2 , Figure 2 This is a flow chart of a first embodiment of an identity authentication method of the present invention, wherein the identity authentication method comprises:

[0075] Step S10, when an operation request is detected, obtaining user identity data carried in the operation request;

[0076] The method of filtering illegal access requests in the prior art to relieve the pressure of the backend server and database is to filter illegal requests through a blacklist. When the amount of data is small and the amount of business requests is not large, the blacklist query system performs pure DB (datebase, database) query retrieval, and the query efficiency is high, which basically meets the business needs. However, with the growth of business, the blacklist query system has to cope with the daily level of tens of millions, and the amount of blacklist data has also reached tens of millions. The query retrieval based on DB has performance bottlenecks, and service timeouts are prone to occur. Moreover, the timeout situation will increase with the increase of the number of requests and the increase of the number of concurrent requests, and a large number of abnormal situations such as request timeout fuses and transaction losses will occur, which will affect the efficiency and experience of the access party calling the blacklist query service. Obviously, when the amount of blacklist data is large, the method of filtering illegal access requests through pure DB query is not only inefficient, but also has a high abnormal rate. This situation does not meet the business needs of financial institutions such as banks, and affects the illegal access request filtering of various business platforms (such as development loan business platforms, deposit business platforms, etc.) by financial institutions such as banks. Based on this, the technical solution of the present invention is proposed.

[0077] In an embodiment of the present invention, when the identity authentication device detects an operation request, it obtains the user identity data corresponding to the user who initiated the operation request from the operation request. The operation request may be an access request, a query request, etc. of the user, for example, the user requests to access a financial website, a loan platform, or a financial management platform, etc. The operation request includes the user's identity data, which may be a character string of any length, and the character string may include a user name or a user's IP address, etc. Each user corresponds to a piece of user identity data.

[0078] Step S20, verifying whether the operation request is legal based on the user identity data and a preset rule filter, wherein the preset rule filter includes an array of illegal identity data;

[0079] In this embodiment, after obtaining the user identity data carried by the operation request, the operation request is verified to be legal through a preset rule filter including an array of illegal identity data, and the preset rule filter is generated by an identity authentication device based on a blacklist database storing illegal identity data, and the identity authentication device is integrated with the function of an offline computing terminal. Among them, the illegal identity data refers to the identity of a user with illegal operation records, and the illegal operation records can be records of overdue, swiping orders, etc. The operation and maintenance personnel can set the illegal operation records and illegal identity data as needed, and this embodiment does not make specific restrictions.

[0080] Specifically, verify whether the user identity data hits the preset rule filter, which includes an array of illegal identity data; if the user identity data does not hit the preset rule filter, determine that the operation request is legal; if the user identity data hits the preset rule filter, query the blacklist database to determine whether the user identity data exists in the blacklist database, and the blacklist database stores illegal identity data; if the user identity data exists in the blacklist database, determine that the operation request is illegal; if the user identity data does not exist in the blacklist database, determine that the operation request is legal.

[0081] Furthermore, before step 20, the method also includes a step of constructing the preset rule filter by the identity authentication device. Specifically, the preset rule filter includes a very long binary vector (i.e., an array). During the construction of the preset rule filter, the identity authentication device calculates the identity data of each illegal user, i.e., the illegal identity data, according to a preset function to obtain multiple function values, and then sets the bit data of the positions of the binary vector corresponding to the multiple function values ​​to a first preset value, wherein the initial values ​​of all corresponding bits of the binary vector are the second preset values.

[0082] Furthermore, in order to reduce the processing pressure of the identity authentication device and improve the filtering efficiency of illegal access requests, the identity authentication device is separated from the offline computing terminal. The preset rule filter can be constructed by the offline computing terminal based on a blacklist database storing illegal identity data. The preset rule filter is constructed by the offline computing terminal according to the above method.

[0083] Step S30: If the operation request is legal, execute the operation request according to a preset business operation process.

[0084] In this embodiment, if the operation request is determined to be legitimate through the user identity data and the preset rule filter, the corresponding business operation is performed according to the preset business operation process of the operation request to feedback the relevant execution results to the user. For example, when the user's operation request is to request access to the relevant information of "micro loans" on the loan platform, if it is verified that the user's operation request is legitimate, the preset business operation process is to obtain the relevant information of "micro loans" on the loan platform, feedback and display to the user.

[0085] This embodiment obtains the user identity data carried by the operation request when the operation request is detected; verifies whether the operation request is legal based on the user identity data and a preset rule filter, wherein the preset rule filter includes an array of illegal identity data; if the operation request is legal, the operation request is executed according to a preset business operation process. This realizes intercepting the operation request when the operation request is detected, and after verifying the legality of the operation request based on the user identity data carried by the operation request and the preset rule filter including an array of illegal identity data, the operation request is released to execute the operation request, thereby filtering illegal requests through the preset rule filter to reduce the operating pressure of the background server, thereby improving the efficiency of the identity authentication process.

[0086] Furthermore, a second embodiment of the identity authentication method of the present invention is proposed, wherein the above step S20 includes:

[0087] Step S21, verifying whether the user identity data matches the preset rule filter;

[0088] Step S22: If the user identity data does not match the preset rule filter, the operation request is determined to be legal.

[0089] In this embodiment, whether the operation request is legal is determined by whether the user identity data carried by the operation request hits the preset rule filter. Since the characteristic of the preset rule filter itself is that it can accurately determine that an element is not in the set, but can only determine that an element may be in the set, if the user identity data does not hit the preset rule filter, it means that the user identity data must not exist in the blacklist database containing illegal identity data, and the operation request is legal.

[0090] Furthermore, after step S21, the following steps are further included:

[0091] Step S23, if the user identity data hits the preset rule filter, query the blacklist database to determine whether the user identity data exists in the blacklist database, and the blacklist database stores illegal identity data;

[0092] The characteristic of the preset rule filter itself is that it can only determine whether an element may be in the set. If the user identity data hits the preset rule filter, to confirm whether the operation request is legal, it is necessary to further query the blacklist database to confirm whether the operation request is legal based on whether the user identity data exists in the blacklist database. The blacklist database stores illegal identity data.

[0093] Step S24, if the user identity data exists in the blacklist database, then determining that the operation request is illegal;

[0094] Step S25: If the user identity data does not exist in the blacklist database, it is determined that the operation request is legal.

[0095] If the user identity data exists in the blacklist database, it means that the user identity is on the blacklist, and the operation request is determined to be illegal; if the user identity data does not exist in the blacklist database, it means that the user identity is not on the blacklist, and the operation request is determined to be legal.

[0096] Furthermore, the above step S21 includes:

[0097] Step S211, the user identity data is subjected to a preset function operation to obtain a corresponding function value;

[0098] Before step 211, the step of constructing the preset rule filter by the identity authentication device is also included. Specifically, the preset rule filter includes a very long binary vector (i.e., an array). During the construction of the preset rule filter, the identity authentication device calculates the identity data of each illegal user, i.e., the illegal identity data, according to a preset function to obtain multiple function values, and then sets the bit data of the position of the binary vector corresponding to the multiple function values ​​to a first preset value, wherein the initial values ​​of all corresponding bits of the binary vector are the second preset value. The preset function is set by the operation and maintenance personnel as needed, and one or more hash functions such as the secure hash algorithm SHA series (e.g., SHA-1, SHA-256, SHA-384, etc.), the message digest algorithm MD series (e.g., MD2, MD3, MD4, MD5, etc.), or the advanced encryption standard AES, etc. can also be used. This embodiment does not make specific restrictions on the preset function.

[0099] Step S212, determining whether the corresponding bits of the function value in the array are all first preset values;

[0100] In this embodiment, to determine whether the user identity data hits the preset rule filter, the user identity data is first operated through a preset function to obtain a function value corresponding to the user identity data, and then the user identity data is determined to hit the preset rule filter based on whether the corresponding bit of the function value in the array is the first preset value.

[0101] Step S213, if the function values ​​in the corresponding bits of the array are all the first preset values, it is determined that the user identity data hits the preset rule filter;

[0102] Step S214: if the function value has a second preset value at the corresponding bit of the array, it is determined that the user identity data does not hit the preset rule filter.

[0103] In this embodiment, if the corresponding bits of the function value in the array are all first preset values, it is determined that the user identity data hits the preset rule filter; if the corresponding bits of the function value in the array have second preset values, that is, the corresponding bits of the function value in the array are not all first preset values, it is determined that the user identity data does not hit the preset rule filter.

[0104] To assist understanding, an example is given below: the array length in the preset rule filter is set to 100 bits, all bits in the array are set to the second preset value (e.g., 0), and two different hash functions are selected. Obtain different function values ​​A1 and A2 of different hash functions corresponding to the same illegal identity data A. When constructing the preset rule filter, set the position of the array corresponding to A1 (e.g., the 35th bit) to the first preset value (e.g., 1), and set the position of the array corresponding to A2 (e.g., the 86th bit) to 1. Similarly, each illegal identity data in the blacklist database is recorded in the preset rule filter through the above method. To determine whether the current user identity data X hits the preset rule filter, first obtain different function values ​​X1 and X2 of different hash functions corresponding to the previous user identity data X through two different hash functions. If the position of the array corresponding to X1 is 1 and the position of the array corresponding to X2 is 0, it means that the current user identity data does not hit the preset rule filter.

[0105] It can be understood that this embodiment does not specifically limit the values ​​of the first preset value and the second preset value. For example, the first preset value may be 1 and the second preset value may be 0; or the first preset value may be 0 and the second preset value may be 1.

[0106] In this embodiment, illegal requests are filtered through a preset rule filter to reduce the operating pressure of the background server, thereby improving the efficiency of the identity authentication process.

[0107] Furthermore, a third embodiment of the identity authentication method of the present invention is proposed, and before the above step S20, the following steps are further included:

[0108] Step S201, obtaining a preset rule filter issued by an offline computing terminal, wherein the preset rule filter is constructed by the offline computing terminal according to a preset construction frequency and / or based on a blacklist database when the change amount of illegal identity data in the blacklist database is greater than a preset change threshold.

[0109] In this embodiment, in order to reduce the processing pressure of the identity authentication device and improve the filtering efficiency of illegal access requests, the identity authentication device is separated from the offline computing terminal, and the preset rule filter is constructed by the offline computing terminal based on the blacklist database storing illegal identity data. The construction of the preset rule filter can be constructed by the offline computing terminal at a preset construction frequency, or it can be constructed by the offline computing terminal when it detects that the change amount of illegal identity data in the blacklist database is greater than the preset change threshold. The above two blacklist database construction methods can be implemented separately or in combination, and this embodiment does not make specific restrictions. In addition, the change amount of illegal identity data includes a two-way conversion of illegal identity data and legal identity data.

[0110] Furthermore, after step S201, the above step further includes:

[0111] Determine whether the preset rule filter issued by the offline computing terminal is successfully obtained; if the preset rule filter issued by the offline computing terminal is successfully obtained, execute step S20; if the preset rule filter issued by the offline computing terminal is not obtained, determine whether the operation request is legal based on whether the user identity data exists in the blacklist data.

[0112] In this embodiment, if the identity authentication device fails to obtain the preset rule filter from the offline computing terminal due to abnormal reasons such as network abnormalities, the identity authentication device performs service downgrade processing, that is, it determines whether the operation request is legal based on whether the user identity data exists in the blacklist database. If the user identity data exists in the blacklist database, the operation request is determined to be illegal; if the user identity data does not exist in the blacklist database, the operation request is determined to be legal.

[0113] Furthermore, after step S30, the following steps are further included:

[0114] If the operation request is illegal, a warning prompt is returned to the terminal that initiated the operation request.

[0115] In this embodiment, if it is determined that the operation request is illegal, a warning prompt is returned to the terminal that initiated the operation request.

[0116] Furthermore, in order to increase the flexibility of the identity authentication method, the identity authentication method may also include the following steps: when an operation request is detected, the user identity data carried by the operation request is obtained; based on the user identity data and Redis (an efficient storage system) storing illegal identity data, the operation request is verified to be legal; if the operation request is legal, the operation request is executed according to the preset business operation process. This solution can also realize the rapid query of user identity data by utilizing the efficiency of Redis, and then realize the filtering of illegal requests, so as to reduce the operating pressure of the background server. However, the solution using Redis for identity authentication has a heavy service dependence due to the introduction of the component Redis. At the same time, as the amount of data increases, Redis requires more resources and memory. In the solution using preset rule filters for identity authentication, the memory occupied is fixed and controllable. Therefore, the solution using preset rule filters for identity authentication is an optimized solution.

[0117] This embodiment can improve the accuracy of verification by constructing a preset rule filter according to a preset construction frequency and / or constructing a preset rule filter when the change amount of illegal identity data in the blacklist database is greater than a preset change threshold.

[0118] The invention also provides an identity authentication device.

[0119] Reference Figure 3 , Figure 3 This is a functional module diagram of a first embodiment of an identity authentication device of the present invention, wherein the identity authentication device comprises:

[0120] The detection module 10 is used to obtain the user identity data carried in the operation request when an operation request is detected;

[0121] A verification module 20, used to verify whether the operation request is legal based on the user identity data and a preset rule filter, wherein the preset rule filter includes an array of illegal identity data;

[0122] The execution module 30 is used to execute the operation request according to a preset business operation process if the operation request is legal.

[0123] Furthermore, the verification module 20 includes:

[0124] A hit verification unit, used to verify whether the user identity data hits the preset rule filter;

[0125] The legality determination unit is used to determine that the operation request is legal if the user identity data does not match a preset rule filter.

[0126] Furthermore, the identity verification device further comprises:

[0127] A query verification module, used for querying a blacklist database to determine whether the user identity data exists in the blacklist database if the user identity data hits a preset rule filter, and the blacklist database stores illegal identity data;

[0128] An illegal determination module, used for determining that the operation request is illegal if the user identity data exists in the blacklist database;

[0129] The legality determination module is used to determine that the operation request is legal if the user identity data does not exist in the blacklist database.

[0130] Furthermore, the hit verification unit includes:

[0131] An operation subunit, used for performing a preset function operation on the user identity data to obtain a corresponding function value;

[0132] A judging subunit, used for judging whether the corresponding bits of the function values ​​in the array are all first preset values;

[0133] a hit subunit, configured to determine that the user identity data hits a preset rule filter if the corresponding bits of the function value in the array are all first preset values;

[0134] The miss subunit is used to determine that the user identity data misses a preset rule filter if the function value has a second preset value in the corresponding bit of the array.

[0135] Furthermore, the identity verification device further comprises:

[0136] The acquisition module is used to obtain the preset rule filter issued by the offline computing terminal, and the preset rule filter is constructed by the offline computing terminal according to a preset construction frequency and / or based on the blacklist database when the change amount of illegal identity data in the blacklist database is greater than a preset change threshold.

[0137] Furthermore, the identity verification device further comprises:

[0138] An acquisition judgment module is used to judge whether the preset rule filter sent by the offline computing terminal is successfully acquired;

[0139] A successful execution module, for executing the steps of: verifying whether the operation request is legal based on the user identity data and the preset rule filter if the preset rule filter sent by the offline computing terminal is successfully obtained;

[0140] The downgrade module is used to determine whether the operation request is legal according to whether the user identity data exists in the blacklist database if the preset rule filter sent by the offline computing terminal is not obtained.

[0141] Furthermore, the identity verification device further comprises:

[0142] The alarm module is used to return an alarm prompt to the terminal that initiates the operation request if the operation request is illegal.

[0143] The specific implementation of the identity authentication device of the present invention is basically the same as the above-mentioned identity authentication method embodiments, and will not be repeated here.

[0144] In addition, an embodiment of the present invention further provides a computer-readable storage medium.

[0145] An identity authentication program is stored on the computer-readable storage medium, and when the identity authentication program is executed by the processor, the steps of the identity authentication method described above are implemented.

[0146] The specific implementation of the computer-readable storage medium of the present invention is basically the same as the above-mentioned embodiments of the identity authentication method, and will not be repeated here.

[0147] The embodiments of the present invention are described above in conjunction with the accompanying drawings, but the present invention is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the enlightenment of the present invention, ordinary technicians in this field can also make many forms without departing from the scope of protection of the present invention and the claims. All equivalent structures or equivalent process changes made using the contents of the specification and drawings of the present invention, or directly or indirectly used in other related technical fields, are protected by the present invention.

Claims

1. An identity authentication method, characterized in that: The identity verification method comprises the following steps: When an operation request is detected, obtaining user identity data carried in the operation request; Verifying whether the operation request is legal based on the user identity data and a preset rule filter, wherein the preset rule filter includes an array of illegal identity data; the preset rule filter is constructed by an offline computing terminal based on a blacklist database storing illegal identity data; the preset rule filter includes a binary vector, and in the process of constructing the preset rule filter, the identity data of each illegal user is operated according to a preset function to obtain multiple function values, and the bit data of the position of the binary vector corresponding to the multiple function values ​​is set to a first preset value, wherein the initial values ​​of all corresponding bits of the binary vector are a second preset value; If the user identity data hits the preset rule filter, query the blacklist database to determine whether the user identity data exists in the blacklist database, and the blacklist database stores illegal identity data; If the user identity data exists in the blacklist database, the operation request is determined to be illegal; If the user identity data does not exist in the blacklist database, the operation request is determined to be legal; If the operation request is legal, execute the operation request according to the preset business operation process; The step of verifying whether the operation request is legal based on the user identity data and the preset rule filter includes: The user identity data is subjected to a preset function operation to obtain a corresponding function value; Determining whether the corresponding bits of the function values ​​in the array are all first preset values; If the function values ​​in the corresponding bits of the array are all first preset values, it is determined that the user identity data hits the preset rule filter; If the function value has a second preset value in the corresponding bit of the array, it is determined that the user identity data does not hit the preset rule filter; If the user identity data does not match the preset rule filter, the operation request is determined to be legal.

2. The identity authentication method according to claim 1, characterized in that: Before the step of verifying whether the operation request is legal based on the user identity data and the preset rule filter, the method further includes: Obtain a preset rule filter issued by an offline computing terminal, wherein the preset rule filter is constructed by the offline computing terminal according to a preset construction frequency and / or based on a blacklist database when the amount of change in illegal identity data in the blacklist database is greater than a preset change threshold.

3. The identity authentication method according to claim 2, characterized in that: After the step of obtaining the preset rule filter sent by the offline computing terminal, the method further includes: Determine whether the preset rule filter sent by the offline computing terminal is successfully obtained; If the preset rule filter sent by the offline computing terminal is successfully obtained, the steps are executed: verifying whether the operation request is legal based on the user identity data and the preset rule filter; If the preset rule filter sent by the offline computing terminal is not obtained, whether the operation request is legal is determined based on whether the user identity data exists in the blacklist database.

4. The identity authentication method according to any one of claims 1 to 3, characterized in that: After the step of verifying whether the operation request is legal based on the user identity data and the preset rule filter, wherein the preset rule filter includes an array of illegal identity data, the method further includes: If the operation request is illegal, a warning prompt is returned to the terminal that initiated the operation request.

5. An identity verification device, characterized in that: The identity verification device comprises: A detection module, configured to, when an operation request is detected, obtain user identity data carried in the operation request; A verification module, used to verify whether the operation request is legal based on the user identity data and a preset rule filter, wherein the preset rule filter includes an array of illegal identity data; the preset rule filter is constructed by an offline computing terminal based on a blacklist database storing illegal identity data; the preset rule filter includes a binary vector, and during the construction of the preset rule filter, the identity data of each illegal user is operated according to a preset function to obtain multiple function values, and the bit data of the position of the binary vector corresponding to the multiple function values ​​is set to a first preset value, wherein the initial values ​​of all corresponding bits of the binary vector are a second preset value; A query verification module, used for querying a blacklist database to determine whether the user identity data exists in the blacklist database if the user identity data hits a preset rule filter, and the blacklist database stores illegal identity data; An illegal determination module, used for determining that the operation request is illegal if the user identity data exists in the blacklist database; A legal determination module, used for determining that the operation request is legal if the user identity data does not exist in the blacklist database; An execution module, configured to execute the operation request according to a preset business operation process if the operation request is legal; The verification module comprises: A hit verification unit, used to verify whether the user identity data hits the preset rule filter; The hit verification unit comprises: An operation subunit, used for performing a preset function operation on the user identity data to obtain a corresponding function value; A judging subunit, used for judging whether the corresponding bits of the function values ​​in the array are all first preset values; a hit subunit, configured to determine that the user identity data hits a preset rule filter if the corresponding bits of the function value in the array are all first preset values; a miss subunit, configured to determine that the user identity data misses a preset rule filter if the function value has a second preset value in a corresponding bit of the array; The legality determination unit is used to determine that the operation request is legal if the user identity data does not match a preset rule filter.

6. An identity verification device, characterized in that: The identity authentication device includes a memory, a processor, and an identity authentication program stored in the memory and executable on the processor. When the identity authentication program is executed by the processor, the steps of the identity authentication method as described in any one of claims 1 to 4 are implemented.

7. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores an identity authentication program, and when the identity authentication program is executed by a processor, the steps of the identity authentication method according to any one of claims 1 to 4 are implemented.

Images