Online activation method, device, terminal equipment, server and medium of security shield

Abstract

The present application provides a method, device, terminal device, server and medium for online activation of a security shield, the method comprising: receiving device feature information and operating environment sent by a terminal device; judging whether the device feature information and operating environment meet preset conditions, if so, sending a corresponding identity authentication method to the terminal according to the device feature information, so that the terminal device guides the user to complete the operation of inputting identity authentication information according to the identity authentication method; receiving the user's identity authentication information sent by the terminal device; authenticating the user's identity authentication information, if the authentication is passed, sending an activation security shield instruction to the terminal device, so that the terminal device initiates a security shield activation process to guide the user to complete the activation operation of the security shield. The present application is based on risk identification control and online identity authentication technology, and the security shield can be activated through the corresponding authentication function provided by the online bank, which greatly facilitates users and is conducive to the promotion and use of the security shield.

Description

Technical Field

[0001] The present application relates to the field of online banking security technology, and more specifically, to a method, device, terminal equipment, server and medium for online activation of a security shield. Background Art

[0002] With the popularization of smart terminal devices, online banking is becoming more and more popular among users. As a new type of secure and easy-to-use authentication device built into terminal devices, Security Shield is gradually being applied to online banking to meet users' demands for secure transactions and transfers.

[0003] However, in the prior art, users need to go to a bank branch to activate the Security Shield service. The bank will review the user information on site, and the Security Shield service can only be activated after the user passes the identity authentication. This can easily cause inconvenience to customers and is not conducive to the promotion and use of the Security Shield. Summary of the invention

[0004] In view of the shortcomings of the existing methods, the present application proposes a method, device, terminal equipment, server and medium for online activation of a security shield to solve at least one of the above-mentioned technical problems.

[0005] In a first aspect, an embodiment of the present application provides an online activation method of a security shield, comprising:

[0006] Receive device feature information and operating environment sent by terminal devices;

[0007] Determine whether the device feature information and the operating environment meet the preset conditions. If so, send the corresponding identity authentication method to the terminal according to the device feature information, so that the terminal device guides the user to complete the operation of inputting the identity authentication information according to the identity authentication method;

[0008] Receive user identity authentication information sent by the terminal device;

[0009] The user's identity authentication information is authenticated. If the authentication is successful, the identity authentication method is saved and a security shield activation instruction is sent to the terminal device, so that the terminal device initiates the security shield activation process to guide the user to complete the security shield activation operation.

[0010] In one embodiment of the present application, determining whether the device feature information and the operating environment meet preset conditions includes:

[0011] Determine whether the device feature information meets the conditions for opening the security shield, and determine whether the operating environment is safe;

[0012] If the device feature information meets the security shield activation conditions and the operating environment is safe, it is determined that the device feature information and the operating environment meet the preset conditions.

[0013] In one embodiment of the present application, the identity authentication method includes at least one of the following: static password authentication, SMS verification code authentication, dynamic password authentication, face recognition authentication, fingerprint recognition authentication, iris recognition authentication and digital signature authentication.

[0014] In a second aspect, an embodiment of the present application provides an online activation method of a security shield, including:

[0015] In response to the user's security shield activation application operation, the device feature information and operating environment are collected and sent to the server, so that the server determines whether the device feature information and operating environment meet the preset conditions;

[0016] Receive the identity authentication method sent by the server, and guide the user to complete the operation of inputting identity authentication information according to the identity authentication method;

[0017] Collect the identity authentication information entered by the user and send it to the server, so that the server authenticates the user's identity authentication information;

[0018] Receive the security shield activation instruction sent by the server, initiate the security shield activation process to guide the user to complete the security shield activation operation.

[0019] In one embodiment of the present application, the user is guided to complete the operation of inputting identity authentication information according to the identity authentication method, including: guiding the user to complete at least one of static password authentication, SMS verification code authentication, dynamic password authentication, face recognition authentication, fingerprint recognition authentication, iris recognition authentication and digital signature authentication.

[0020] In one embodiment of the present application, a security shield activation process is initiated to guide the user to complete the security shield activation operation, including:

[0021] Display the security shield download interface and security certificate download interface;

[0022] Guide users to download and activate security shield, and guide users to download and install security certificates.

[0023] In one embodiment of the present application, after the security shield is activated, corresponding business rules are formulated according to the security level of the identity authentication method.

[0024] In a third aspect, an embodiment of the present application provides an online activation device for a security shield, including:

[0025] The security verification module is used to receive the device feature information and operating environment sent by the terminal device; determine whether the device feature information and operating environment meet the preset conditions, and if so, send the corresponding identity authentication method to the terminal according to the device feature information, so that the terminal device guides the user to complete the operation of inputting the identity authentication information according to the identity authentication method;

[0026] The identity authentication module is used to receive the user's identity authentication information sent by the terminal device; authenticate the user's identity authentication information. If the authentication is successful, the identity authentication method is saved and a security shield activation instruction is sent to the terminal device, so that the terminal device initiates the security shield activation process to guide the user to complete the security shield activation operation.

[0027] In a fourth aspect, an embodiment of the present application provides an online activation method of a security shield, comprising:

[0028] The first information collection module is used to respond to the user's security shield activation application operation, collect device feature information and operating environment and send them to the server, so that the server determines whether the device feature information and operating environment meet the preset conditions;

[0029] The second information collection module receives the identity authentication method sent by the server, guides the user to complete the operation of inputting identity authentication information according to the identity authentication method; collects the identity authentication information input by the user and sends it to the server, so that the server authenticates the user's identity authentication information;

[0030] The security shield activation module is used to receive the security shield activation instruction sent by the server, initiate the security shield activation process to guide the user to complete the security shield activation operation.

[0031] In a fifth aspect, an embodiment of the present application provides a server comprising: a memory, a processor and a communication unit; the memory and the communication unit are both communicatively connected to the processor, and the communication unit is used for server communication connection;

[0032] The memory stores a computer program, and when the computer program is executed by the processor, the online activation method of the security shield provided in the first aspect of the embodiment of the present application is implemented.

[0033] In a sixth aspect, an embodiment of the present application provides a terminal device including: a memory, a processor, and a communication unit; the memory and the communication unit are both communicatively connected to the processor, and the communication unit is used for communication connection with a server;

[0034] The memory stores a computer program, and when the computer program is executed by the processor, the online activation method of the security shield provided in the second aspect of the embodiment of the present application is implemented.

[0035] In a seventh aspect, an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor of a server, the online activation method of the security shield provided in the first aspect of the embodiment of the present application is implemented.

[0036] In an eighth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor of a terminal device, the online activation method of the security shield provided in the second aspect of the embodiment of the present application is implemented.

[0037] The technical solution provided in the embodiments of the present application has at least the following beneficial effects:

[0038] In the embodiment of the present application, based on risk identification control and online identity authentication technology, the security shield is activated quickly, conveniently and safely through the corresponding authentication function provided by the online bank. The user can complete the operation of activating the security shield without having to review the identity information at the counter, which greatly facilitates the user and is conducive to the promotion and use of the security shield.

[0039] In addition, the server can save the user's identity authentication method when activating the security shield, which allows the business system to formulate different business rules based on identity authentication methods of different security levels, helping to improve the security factor of the security shield.

[0040] Additional aspects and advantages of the present application will be partially given in the following description, which will become apparent from the following description, or will be understood through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which:

[0042] Figure 1 A communication diagram between the server and the terminal device provided for this application;

[0043] Figure 2 A flowchart of an online activation method of a security shield provided in this application;

[0044] Figure 3 A schematic diagram of a module of an online activation device for the first security shield provided in this application;

[0045] Figure 4 A schematic diagram of a module of an online activation device for a second security shield provided in this application;

[0046] Figure 5 A schematic diagram of the modules of the server provided for this application;

[0047] Figure 6 A schematic diagram of the modules of the terminal device provided in this application. DETAILED DESCRIPTION

[0048] The present application is described in detail below, and examples of embodiments of the present application are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar components or components with the same or similar functions. In addition, if the detailed description of the known technology is unnecessary for the features of the present application shown, it will be omitted. The embodiments described below with reference to the accompanying drawings are exemplary and are only used to explain the present application, and cannot be interpreted as limiting the present application.

[0049] It will be understood by those skilled in the art that, unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as those generally understood by those skilled in the art to which this application belongs. It should also be understood that terms such as those defined in general dictionaries should be understood to have meanings consistent with those in the context of the prior art, and will not be interpreted with idealized or overly formal meanings unless specifically defined as here.

[0050] It will be understood by those skilled in the art that, unless expressly stated, the singular forms "one", "said", and "the" used herein may also include plural forms. It should be further understood that the term "comprising" used in the specification of the present application refers to the presence of the features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or groups thereof. It should be understood that when we refer to an element as being "connected" or "coupled" to another element, it may be directly connected or coupled to the other element, or there may be an intermediate element. In addition, the "connection" or "coupling" used herein may include wireless connection or wireless coupling. The term "and / or" used herein includes all or any unit and all combinations of one or more associated listed items.

[0051] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments.

[0052] The embodiment of the present application provides a method for online activation of a security shield, which is executed by a server 100 and a terminal device 200. Figure 1 As shown, the server 100 and the terminal device 200 can be communicatively connected.

[0053] The terminal device 200 is installed with an online banking client for interaction between the terminal device 200 and the user. The terminal device 200 provided in the embodiment of the present application can be specially designed and manufactured for the required purpose, or can also include known devices in general-purpose computers. For example, the terminal device 200 can be a mobile phone, a tablet computer, a laptop computer, an ultra-mobile personal computer (UMPC), a netbook, etc. The embodiment of the present application does not impose any restrictions on the specific type of the terminal device 200. Taking the terminal device 200 as a mobile phone as an example, the online banking client is specifically a mobile banking client, and the security shield to be installed is specifically a mobile phone shield.

[0054] Figure 2 : is a flowchart of an online activation method of a security shield provided in an embodiment of the present application, the method comprising:

[0055] S301: The terminal device 200 collects device feature information and operating environment and sends them to the server 100 in response to the user's security shield activation application operation.

[0056] The user opens and logs in to the online bank on the terminal device 200, and performs the security shield activation application operation through the operation control provided by the online bank. The terminal device 200 collects device feature information and operating environment in response to the user's security shield activation application operation and sends it to the server 100. Those skilled in the art will understand that if the terminal device 200 is a mobile bank, the user opens and logs in to the mobile bank on the mobile phone.

[0057] In one embodiment of the present application, the device feature information includes at least the brand, model, operating system version information, security chip information, and fingerprint function information of the terminal device 200. The operating environment includes at least the root record information, camera permission information, fingerprint permission information, and installed application information of the terminal device 200.

[0058] S302: The server 100 receives the device feature information and operating environment sent by the terminal device 200, and determines whether the device feature information and operating environment meet the preset conditions. If the device feature information and operating environment meet the preset conditions, step S303 is executed; if the device feature information and operating environment do not meet the preset conditions, the current process ends.

[0059] In one embodiment of the present application, determining whether the device characteristic information and the operating environment meet the preset conditions specifically includes: determining whether the device characteristic information meets the conditions for activating the security shield, and determining whether the operating environment is safe; if the device characteristic information meets the conditions for activating the security shield and the operating environment is safe, determining that the device characteristic information and the operating environment meet the preset conditions, and then executing step S303; if the device characteristic information does not meet the conditions for activating the security shield and / or the operating environment is not safe, determining that the device characteristic information and the operating environment do not meet the preset conditions, and then terminating this process.

[0060] In one embodiment of the present application, determining whether the device feature information meets the conditions for opening the security shield may specifically be: determining whether the brand, model, operating system version information, security chip information, and fingerprint function information of the terminal device 200 meet the corresponding requirements. If all of the above items meet the corresponding requirements, it is determined that the device feature information meets the conditions for opening the security shield; if any of the above items does not meet the corresponding requirements, it is determined that the device feature information does not meet the conditions for opening the security shield.

[0061] In one embodiment of the present application, determining whether the operating environment is safe may specifically be: determining whether the root record information, camera permission information, fingerprint permission information, and installed application information of the terminal device 200 meet the corresponding requirements. If all of the above items meet the corresponding requirements, the operating environment is determined to be safe; if any of the above items does not meet the corresponding requirements, the operating environment is determined to be unsafe.

[0062] S303: The server 100 sends a corresponding identity authentication method to the terminal according to the device feature information.

[0063] In one embodiment of the present application, the identity authentication method includes one of static password authentication, SMS verification code authentication, dynamic password authentication, face recognition authentication, fingerprint recognition authentication, iris recognition authentication and digital signature authentication, or it can be a combination of multiple of the above, such as a combination of static password and SMS verification code authentication or a combination of face recognition and dynamic password authentication.

[0064] S304: The terminal device 200 receives the identity authentication method sent by the server 100, and guides the user to complete the operation of inputting identity authentication information according to the identity authentication method.

[0065] In one embodiment of the present application, step S304 guides the user to complete the operation of inputting identity authentication information according to the identity authentication method, specifically including: guiding the user to complete at least one of static password authentication, SMS verification code authentication, dynamic password authentication, face recognition authentication, fingerprint recognition authentication, iris recognition authentication and digital signature authentication.

[0066] S305 : The terminal device 200 collects the identity authentication information input by the user and sends it to the server 100 .

[0067] Taking SMS verification code authentication as an example, the terminal device 200 sends a verification code request based on the user's operation. After the terminal device 200 receives the SMS verification code, the user enters the SMS verification code, and the terminal device 200 collects the SMS verification code entered by the user, and sends the SMS verification code as identity authentication information to the server 100; taking face recognition authentication as an example, the terminal device 200 opens the shooting interface to capture the user's face image, and then sends the user's face image as identity authentication information to the server 100. Other identity authentication methods are not described here.

[0068] Optionally, during the process of collecting identity authentication information, multiple secure communications can be performed between the terminal device 200 and the server 100.

[0069] S306: The server 100 receives the user's identity authentication information sent by the terminal device 200 and authenticates the user's identity authentication information. If the user's identity authentication information is authenticated, step S307 is executed; if the user's identity authentication information is not authenticated, the current process ends.

[0070] S307: The server 100 saves the identity authentication method and sends a security shield activation instruction to the terminal device 200.

[0071] S308: The terminal device 200 receives the security shield activation instruction sent by the server 100, and initiates the security shield activation process to guide the user to complete the security shield activation operation.

[0072] In one embodiment of the present application, the security shield activation process is initiated in step S308 to guide the user to complete the security shield activation operation, specifically including: displaying the security shield download interface and the security certificate download interface; guiding the user to download and activate the security shield, and guiding the user to download and install the security certificate.

[0073] In the online activation method of the security shield provided in the embodiment of the present application, based on risk identification control and online identity authentication technology, the security shield is activated quickly, conveniently and safely through the corresponding authentication function provided by the online bank. The user can complete the operation of activating the security shield without having to review the identity information at the counter, which greatly facilitates the user and is conducive to the promotion and use of the security shield.

[0074] Since the server 100 saves the identity authentication method when the user activates the security shield, when the security shield is activated, the corresponding business rules are formulated according to the security level of the identity authentication method. In other words, the business system can formulate different business rules according to the identity authentication methods of different security levels, which helps to improve the security factor of the security shield. Taking the daily transfer limit as an example, if the identity authentication method when activating the security shield is a static password + SMS verification code, the daily transfer limit is 50,000; if the identity authentication method when activating the security shield is face recognition + dynamic password, the daily transfer limit is 500,000; if the identity authentication method when activating the security shield is a digital signature of Bluetooth UKey, there is no upper limit on the daily transfer limit.

[0075] Based on the same inventive concept, the embodiment of the present application further provides an online activation device for a security shield, which is defined as an online activation device 400 for a first security shield in the embodiment of the present application. Figure 3 As shown, the online activation device 400 of the first security shield includes a security verification module 401 and an identity authentication module 402 .

[0076] The security verification module 401 is used to receive the device characteristic information and operating environment sent by the terminal device 200; determine whether the device characteristic information and operating environment meet the preset conditions. If so, send the corresponding identity authentication method to the terminal according to the device characteristic information, so that the terminal device 200 guides the user to complete the operation of entering the identity authentication information according to the identity authentication method.

[0077] The identity authentication module 402 is used to receive the user's identity authentication information sent by the terminal device 200; authenticate the user's identity authentication information, and if the authentication is successful, save the identity authentication method and send a security shield activation instruction to the terminal device 200, so that the terminal device 200 initiates the security shield activation process to guide the user to complete the security shield activation operation.

[0078] In one embodiment of the present application, the security verification module 401 is specifically used to: determine whether the device characteristic information meets the conditions for activating the security shield, and determine whether the operating environment is safe; if the device characteristic information meets the conditions for activating the security shield and the operating environment is safe, then determine whether the device characteristic information and the operating environment meet the preset conditions.

[0079] In one embodiment of the present application, the identity authentication method includes at least one of the following: static password authentication, SMS verification code authentication, dynamic password authentication, face recognition authentication, fingerprint recognition authentication, iris recognition authentication and digital signature authentication.

[0080] In one embodiment of the present application, after the security shield is activated, corresponding business rules are formulated according to the security level of the identity authentication method.

[0081] The online activation device 400 of the first security shield provided in the embodiment of the present application has the same inventive concept as the embodiments described above. The contents not shown in detail in the online activation device 400 of the first security shield can be referred to the embodiments described above and will not be repeated here.

[0082] Based on the same inventive concept, the embodiment of the present application also provides another online activation device for a security shield, which is defined as an online activation device 500 for a second security shield in the embodiment of the present application. Figure 4 As shown, the online activation device 500 of the second security shield includes a first information collection module 501 , a second information collection module 502 and a security shield activation module 503 .

[0083] The first information collection module 501 is used to respond to the user's security shield activation application operation, collect device feature information and operating environment and send them to the server 100, so that the server 100 determines whether the device feature information and operating environment meet the preset conditions;

[0084] The second information collection module 502 receives the identity authentication method sent by the server 100, guides the user to complete the operation of inputting identity authentication information according to the identity authentication method; collects the identity authentication information input by the user and sends it to the server 100, so that the server 100 authenticates the identity authentication information of the user;

[0085] The security shield activation module 503 is used to receive the security shield activation instruction sent by the server 100, and initiate the security shield activation process to guide the user to complete the security shield activation operation.

[0086] In one embodiment of the present application, the second information collection module 502 is specifically used to: guide the user to complete at least one of static password authentication, SMS verification code authentication, dynamic password authentication, face recognition authentication, fingerprint recognition authentication, iris recognition authentication and digital signature authentication.

[0087] In one embodiment of the present application, the security shield activation module 503 is specifically used to: display the security shield download interface and the security certificate download interface; guide the user to download and activate the security shield, and guide the user to download and install the security certificate.

[0088] The online activation device 500 of the second security shield provided in the embodiment of the present application has the same inventive concept as the embodiments described above. The contents not shown in detail in the online activation device 500 of the second security shield can be referred to the embodiments described above and will not be repeated here.

[0089] Based on the same inventive concept, the embodiment of the present application further provides a server 100, such as Figure 5As shown, the server 100 includes a memory 101 , a processor 102 and a communication unit 103 . The memory 101 and the communication unit 103 are both communicatively connected with the processor 102 , and the communication unit 103 is used for communication connection with the server 100 .

[0090] The memory 101 stores a computer program, and when the computer program is executed by the processor 102, the online activation method of the security shield executed by the server 100 in the above embodiment of the present application is implemented.

[0091] In the embodiment of the present application, the server 100 may be a bank server, a certificate server, a mobile phone TSM server, or other types of servers.

[0092] The server 100 provided in the embodiment of the present application has the same inventive concept as the embodiments described above. The contents not shown in detail in the server 100 can be referred to the embodiments described above and will not be repeated here.

[0093] Based on the same inventive concept, the embodiment of the present application further provides a terminal device 200, such as Figure 6 As shown, the terminal device 200 includes a memory 201 , a processor 202 and a communication unit 203 . The memory 201 and the communication unit 203 are both communicatively connected to the processor 201 , and the communication unit 203 is used for communication connection with the server 100 .

[0094] The memory 201 stores a computer program, and when the computer program is executed by the processor 202, the online activation method of the security shield executed by the server 100 in the above embodiment of the present application is implemented.

[0095] The memory in the server 100 and the terminal device 200 of the present application can be ROM (Read-Only Memory) or other types of static storage devices that can store static information and instructions, can be RAM (Random Access Memory) or other types of dynamic storage devices that can store information and instructions, can also be EEPROM (Electrically Erasable Programmable Read Only Memory), CD-ROM (Compact Disc Read-Only Memory) or other optical disk storage, optical disk storage (including compressed optical disk, laser disk, optical disk, digital versatile disk, Blu-ray disk, etc.), magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited to this.

[0096] Those skilled in the art will appreciate that the terminal device 200 provided in the embodiment of the present application can be specially designed and manufactured for the desired purpose, or can also include known devices in a general-purpose computer. For example, the terminal device 200 can be a mobile phone, a tablet computer, a notebook computer, an ultra-mobile personal computer (ultra-mobile personal computer, UMPC), a netbook, and the embodiment of the present application does not impose any restrictions on the specific type of the terminal device 200. These devices have computer programs stored therein, and these computer programs are selectively activated or reconstructed. Such a computer program can be stored in a device (e.g., computer) readable medium or in any type of medium suitable for storing electronic instructions and coupled to a bus respectively.

[0097] The processors in the server 100 and the terminal device 200 of the present application may be a CPU (Central Processing Unit), a general-purpose processor, a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array) or other programmable logic devices, transistor logic devices, hardware components or any combination thereof. It may implement or execute various exemplary logic blocks, modules and circuits described in conjunction with the disclosure of the present application. The processor may also be a combination that implements a computing function, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, etc.

[0098] The terminal device 200 provided in the embodiment of the present application has the same inventive concept as the embodiments described above. The contents not shown in detail in the terminal device 200 can be referred to the embodiments described above and will not be repeated here.

[0099] Based on the same inventive concept, an embodiment of the present application also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by the processor 102 of the server 100, the online activation method of the security shield executed by the server 100 in the above embodiment of the present application is implemented.

[0100] The computer-readable storage medium provided in the embodiment of the present application has the same inventive concept as the embodiments described above. The contents not shown in detail in the computer-readable storage medium can be referred to the embodiments described above and will not be repeated here.

[0101] Based on the same inventive concept, an embodiment of the present application also provides another computer-readable storage medium, on which a computer program is stored. When the computer program is executed by the processor 202 of the terminal device 200, the online activation method of the security shield executed by the terminal device 200 in the above embodiment of the present application is implemented.

[0102] The computer-readable storage medium provided in the embodiment of the present application has the same inventive concept as the embodiments described above. The contents not shown in detail in the computer-readable storage medium can be referred to the embodiments described above and will not be repeated here.

[0103] The above two computer-readable media of the present application include, but are not limited to, any type of disk (including floppy disk, hard disk, optical disk, CD-ROM, and magneto-optical disk), ROM, RAM, EPROM (Erasable Programmable Read-Only Memory), EEPROM, flash memory, magnetic card or optical card. In other words, readable media include any medium that can store or transmit information in a readable form by a device (e.g., a computer).

[0104] Those skilled in the art will appreciate that the various operations, methods, steps, measures, and schemes in the processes discussed in this application may be alternated, altered, combined, or deleted. Further, other steps, measures, and schemes in the various operations, methods, and processes discussed in this application may also be alternated, altered, rearranged, decomposed, combined, or deleted. Further, the steps, measures, and schemes in the prior art that are similar to those disclosed in this application may also be alternated, altered, rearranged, decomposed, combined, or deleted.

[0105] In the description of this application, it should be understood that the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the feature. In the description of this application, unless otherwise specified, "plurality" means two or more.

[0106] It should be understood that, although the steps in the flowchart of the accompanying drawings are displayed in sequence as indicated by the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least a part of the steps in the flowchart of the accompanying drawings may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and their execution order is not necessarily sequential, but can be executed in turn or alternately with other steps or at least a part of the sub-steps or stages of other steps.

[0107] The above is only a partial implementation method of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A method for online activation of a security shield, characterized in that: include: Receive device feature information and operating environment sent by terminal devices; Determine whether the device characteristic information and the operating environment meet a preset condition, and if so, send a corresponding identity authentication method to the terminal according to the device characteristic information, so that the terminal device guides the user to complete the operation of inputting identity authentication information according to the identity authentication method; Receiving identity authentication information of the user sent by the terminal device; Authenticating the identity authentication information of the user, and if the authentication is successful, saving the identity authentication method, and sending a security shield activation instruction to the terminal device, so that the terminal device initiates a security shield activation process to guide the user to complete the security shield activation operation; Wherein, the determining whether the device characteristic information and the operating environment meet preset conditions includes: Determine whether the device feature information meets the conditions for opening the security shield, and determine whether the operating environment is safe, the operating environment at least including the root record information, camera permission information, fingerprint permission information and installed application information of the terminal device; If the device characteristic information meets the security shield activation conditions and the operating environment is safe, it is determined that the device characteristic information and the operating environment meet the preset conditions.

2. The online activation method of the security shield according to claim 1, characterized in that: The identity authentication method includes at least one of the following: static password authentication, SMS verification code authentication, dynamic password authentication, face recognition authentication, fingerprint recognition authentication, iris recognition authentication and digital signature authentication.

3. A method for online activation of a security shield, characterized in that: include: In response to the user's security shield activation application operation, the device feature information and the operating environment are collected and sent to the server, so that the server determines whether the device feature information and the operating environment meet the preset conditions; Receiving the identity authentication method sent by the server, and guiding the user to complete the operation of inputting identity authentication information according to the identity authentication method; Collecting the identity authentication information input by the user and sending it to the server, so that the server authenticates the identity authentication information of the user; Receiving the security shield activation instruction sent by the server, and initiating a security shield activation process to guide the user to complete the security shield activation operation; Wherein, the determining whether the device characteristic information and the operating environment meet preset conditions includes: Determine whether the device feature information meets the conditions for opening the security shield, and determine whether the operating environment is safe, the operating environment at least including the root record information, camera permission information, fingerprint permission information and installed application information of the terminal device; If the device characteristic information meets the security shield activation conditions and the operating environment is safe, it is determined that the device characteristic information and the operating environment meet the preset conditions.

4. The online activation method of the security shield according to claim 3, characterized in that: The step of guiding the user to complete the operation of inputting identity authentication information according to the identity authentication method includes: The user is guided to complete at least one of static password authentication, SMS verification code authentication, dynamic password authentication, face recognition authentication, fingerprint recognition authentication, iris recognition authentication and digital signature authentication.

5. The online activation method of the security shield according to claim 3, characterized in that: The initiating security shield activation process to guide the user to complete the security shield activation operation includes: Display the security shield download interface and security certificate download interface; The user is guided to download and activate the security shield, and the user is guided to download and install the security certificate.

6. The online activation method of the security shield according to claim 3, characterized in that: Also includes: After the security shield is activated, corresponding business rules are formulated according to the security level of the identity authentication method.

7. An online activation device for a security shield, characterized in that: include: A security verification module, configured to receive device feature information and an operating environment sent by a terminal device; determine whether the device feature information and the operating environment meet a preset condition; if so, send a corresponding identity authentication method to the terminal according to the device feature information, so that the terminal device guides the user to complete the operation of inputting the identity authentication information according to the identity authentication method; An identity authentication module, used to receive the identity authentication information of the user sent by the terminal device; Authenticating the identity authentication information of the user, and if the authentication is successful, saving the identity authentication method, and sending a security shield activation instruction to the terminal device, so that the terminal device initiates a security shield activation process to guide the user to complete the security shield activation operation; The security verification module is specifically used to: determine whether the device feature information meets the conditions for opening the security shield, and determine whether the operating environment is safe, the operating environment at least includes the root record information, camera permission information, fingerprint permission information and installed application information of the terminal device; If the device characteristic information meets the security shield activation conditions and the operating environment is safe, it is determined that the device characteristic information and the operating environment meet the preset conditions.

8. An online activation device for a security shield, characterized in that: include: A first information collection module, configured to collect device feature information and operating environment in response to a user's security shield activation application operation and send the collected device feature information and operating environment to a server, so that the server determines whether the device feature information and the operating environment meet preset conditions; The second information collection module receives the identity authentication method sent by the server, guides the user to complete the operation of inputting identity authentication information according to the identity authentication method; collects the identity authentication information input by the user and sends it to the server, so that the server authenticates the identity authentication information of the user; A security shield activation module, used to receive the security shield activation instruction sent by the server, and initiate a security shield activation process to guide the user to complete the security shield activation operation; Wherein, the determining whether the device characteristic information and the operating environment meet preset conditions includes: Determine whether the device feature information meets the conditions for opening the security shield, and determine whether the operating environment is safe, the operating environment at least including the root record information, camera permission information, fingerprint permission information and installed application information of the terminal device; If the device characteristic information meets the security shield activation conditions and the operating environment is safe, it is determined that the device characteristic information and the operating environment meet the preset conditions.

9. A server, characterized in that: include: Memory, processor and communication unit; The memory and the communication unit are both communicatively connected to the processor, and the communication unit is used for communication connection with the server; The memory stores a computer program, and when the computer program is executed by the processor, the online activation method of the security shield according to any one of claims 1 to 2 is implemented.

10. A terminal device, characterized in that: include: Memory, processor and communication unit; The memory and the communication unit are both communicatively connected to the processor, and the communication unit is used for communication connection with the server; The memory stores a computer program, and when the computer program is executed by the processor, the online activation method of the security shield according to any one of claims 3 to 6 is implemented.

11. A computer-readable storage medium, characterized in that: The storage medium stores a computer program, and when the computer program is executed by a processor of the server, the online activation method of the security shield according to any one of claims 1 to 2 is implemented.

12. A computer-readable storage medium, characterized in that: The storage medium stores a computer program, and when the computer program is executed by a processor of a terminal device, the online activation method of the security shield as described in any one of claims 3 to 6 is implemented.

Images